How to mitigate targeted attacks when VPN fails on DNS leak without turning

How to mitigate targeted attacks when VPN fails on DNS leak without turning off WebRTC ? IOS 18.5

My paid VPN vendor unfortunately fails DNS leak test as per another VPN vendor. Because no vendor can meet all my requirements, I am considering continuing using both.
However is it possible to mitigate DNS leak without turning off WebRTC?
If not, is there a shortcut to toggle WebRTC extension in Safari browser?
### **Key Risks of DNS Leaks**

My concern of one risk is Targeted Attacks**:
– Leaked DNS requests can enable phishing, man-in-the-middle attacks, or DNS spoofing (redirecting you to malicious sites)