Normal
Actually, adguard DNS, cleanbrowsing, google, cloudflare, quad9 all of their DNSCrypt, DoH, DoT implementation support DNSSEC by default.