Earlier quoted context omitted.
Not a pi-hole user, but what is the plan for pi-hole once encrypted dns is everywhere? Will it just be dead? I can’t really think of a way for it not to be.
You could have it spoof the keys and add its keys to your OS's key store.
What key store? User-hostile apps (like Chrome) already use their own key store because they know better than the user :^)