Encrypted DNS stops your carrier from tracking you — and it's already built into your phone.