Mullvad also has DNS with different kind of blockers: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls/ And for the DNS blocking you don’t need an account.

I would recommend them too. No problems in more than 5 years.

Maybe Darktable is an option for you.

https://www.darktable.org/

I am using mailbox too and am very happy with them.

In Germany the tap water has, by law, higher quality standards than bottled water. So yes, you can drink the tap water without boiling.

Signal and WhatsApp. WhatsApp only because a lot of people won’t switch to Signal (or Threema, or Matrix).