1) Dnsmasq, you don't need the whole PiHole for that.

2) You're advising security through obscurity instead of a network namespace + firewall.

Please explain #2. How is a filtering proxy security through obscurity?