If you have a homelab (or are homelab curious) this is pretty much a no-brainer! I highly recommend using something like OpenWRT or OPNSense to handle your homelab routing needs.
I actually have external DNS and NTP requests NATed to my router (which has an attached PPS GPS clocksource), so nothing can be sneaky and try and resolve bad things outside the network. Well, except DNS over HTTPS but that’s another story.