@Rajjco - Thank you, your link helped me see that the DNS server IS successfully set to CleanBrowsing (I didn’t realize that VULTR was associated with CleanBrowsing, and hadn’t seen the fully expanded hostname).
But other than that, sorry, I’m still completely lost, as most of this discussion...