Canadian Internet Registration Authority has launched their own DNS service called Canadian Shield. Sadly, it's not the encrypted kind (yet), but it's similar to what some major US security corporations are offering. Can be easily configured on your OpenWrt router (https://www.cira.ca/cybersecurity-services/canadian-shield#setupinstructions). More details are here: https://www.cira.ca/earlyaccess.
PS. They also offer stock images for your web-sites with some Canadian flare: https://www.cira.ca/stock-images/gallery 