/etc/config/stubby is setup out of the box to use the Cloudflare nameservers.
Verify at https://www.cloudflare.com/ssl/encrypted-sni/