For gog games you can check the digital signature on the installer to make sure it’s legit. It should be signed by GOG.

Not really as hiding dns alone doesn’t give you a big increase in privacy. Your isp can see what sites you visit immediately after anyway.

It could be argued that sending all your dns requests to a 3rd party by default is actually a decrease in privacy.