Worth noting that http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html indicates that
-p, --port=
Listen on instead of the standard DNS port (53). Setting this to zero completely disables DNS function, leaving only DHCP and/or TFTP.
When I was running unbound on OpenWRT, I set the port to 0 to disable the DNS functionality of dnsmasq entirely.
@All - thanks for all the really helpful comments here. Just wanted to let everyone know that following the feedback from @davidc502 and @jeff, I decided to run with dnscrypt-proxy for now until I am bit more confident with using the terminal.
In saying that, please feel free to keep the dialog going as I am sure this post will help many others in future.
Thanks,
~ Tala ~