This is the correct answer. A VPN encrypts and obfuscates all your connections, not just the web browser.
If all you care about is hiding the websites you visit from your ISP, DNS over TLS is fine. But just remember that you’re bleeding data by using your real IP (ISP, geolocation, etc.). And any other connection, is just unabashedly, you.