Agree that we are behind with GUI support for secure DNS and I like how enthusiastic your are about the script. Unfortunately, this is just a teaser.
Actually, the functionality should be in systemd-resolved or network manager (or elsewhere maybe). And then configured via the default GUI. This will take time.