Or install and configure
OpenVPN in Braiins OS, there is
even a gui for it.
Of course, you could also use
Stratum V2, which is encrypted, with
dnscrypt-proxy in your lan which encrypts dns petitions, and also happens to cache dns.
Remember to petition your pool operator or asic manufacturer to add support for this, if they still haven't done so. Since there are people that don't care about privacy, living in safe free countries.
In the meantime, you can just switch to the firmware and pool that does support it.