The question is whether Oracle working together with Cloudflare is a more likely scenario or the “trusted” VPN provider literally selling your data anyway.

I think a trusted DNS server and an Oracle proxy is going to be more secure than trusting one provider with all your data

You don’t need to use cloudflare at all, use cloud 9 or adguard if you like those better

If you don’t trust any of them, you can use ODoH, where cloudflare gets an encrypted request from a proxy. The proxy is only aware of your IP and CF is only aware of the request and the proxy’s IP. So if the proxy doesn’t report your IP to CF, CF doesn’t know who you are.

You can host the ODoH relay on your VPS and it will protect your DNS queries from the provider, while being able to monitor that the provider doesn’t send your IP to CF. CF gets queries from the VPS, but not able to see your real IP. Your ISP similarly only sees encrypted blobs.

You realize you can encrypt your traffic, get your DNS over HTTPS and use encrypted client hello (ECH), right? Oracle sees that you connect to some cloudflare or google IP, mostly. They can’t even see which site you’re going to.

You can self-host for free on Oracle. It only costs you your time