By adding 1.1.1.1 as a secondary DNS on your router, you are allowing DNS traffic to bypass your Pinole. Most operating systems treat a secondary DNS as an alternative, not a fallback.

https://stackoverflow.com/questions/10207640/when-is-a-secondary-dns-server-used