Beginning with Android 9, there is built-in support for DNS over TLS (under the name of "Private DNS").