I'm in the same boat with a pihole as my primary blocker, but I use NextDNS as an upstream resolver since they, of all the options, seem most likely to not log (presuming I configure it apprpriately)