I tried the DNS spoofability test and new Secure DNS 2 server preconfigured in Dragon fares worse than old Secure DNS servers. It seems that worse results are caused by Source port bit predictability score for bit 15.
https://www.grc.com/dns/dns.htm
[attachment deleted by admin]