Unbound (in Debian [archive]) is a is a validating, recursive, and caching DNS resolver with DoT and DoH support
However, at time of writing the Debian Unbound package does not enable DoH [archive].
In context of censorship circumvention, routing DoT over Tor is possible and fast enough according to the DoHoT: making practical use of DNS over HTTPS over Tor [archive].
Root name servers [archive] do not support encryption yet [archive].