My advice, previously provided, stands as given 🙂
As for additions or updates, there are additional advanced techniques to “harden” iOS/iPadOS (such as using DoH, DoT and DNSSEC). While fully and effectively supported by iOS/iPadOS, Apple doesn’t expose this capability via device settings - but there are easy ways to access this functionality. A simple method to set and manage DoH/DoT settings is to use a third-party utility App - DNSecure:
https://apps.apple.com/app/dnsecure/id1533413232
This App does exactly what is needed to effectively configure DoH/DoT - and is free to download and install. Many DNS providers are already preconfigured - including Quad9 and Cloudflare. Additional secure DNS providers can be added if required.
Apple has recently introduced its new Private Relay to its iCloud+ subscribers - in part employing ODoH (a variant of DoH) as an element of this new functionality. More details of this feature can be found here:
About iCloud Private Relay - Apple Support