were you actually leaking something? Like did you check? Because web browsers generally use DOH now. Are you using librewolf by chance? I think it uses Quad9 by default.
And Mullvad is very good with its killswitches. They talk about random software/OS bullshit they have to deal with quite frequently.
It's well known that Google does not tell you that it's forcefully adding second factor to your account if you log into that account on an Android/iOS device/app.
In their terms of service, they share data with ad companies and marketers. But I can't copy paste it here because JavaScript
Edit: grammar