@ah yep, I used it with dnsmasq and dnscrypt-proxy. Have a systemd timer that downloads new rule files every day. dnscrypt-proxy can even automatically load config file changes without service restart. Overall it has been working great. The few false positives (well, to some extent not) are websites that are legitimate but runs software with vulnerabilities, and were used for some phishing campaigns.