ATM I'm using Quad9 and OpenNIC but I'm not sure how much of everything do they cover. I'm also not well aware of any other good "flat DNS" alternative (aka: one you can put right into your /etc/resolv.conf / Windows LAN config, without need of extra internal service).
Cisco operates from the ISP side, they'll poison DNS through their routers. And you should be aware that your ISP will employ Deep Packet Inspection which can also be done with Cisco routers. That means they can intercept internet traffic, especially if your internet connection is not encrypted.