To prevent users from getting rate limited while still receiving the benefits of OISD Big and other security filters, using the "Large" variant is highly recommended for mission-critical applications or big networks. Recommended to always use DNS-over-HTTPS since Plain is not safe.