According to Cloudflare Browser Check it appears that 1.1.1.1 does not validate DNSSEC signed responses but yet the DNS is secure.
How can it be verified secure if it doesn’t validate the DNSSEC responses?
Can you post the results of https://1.1.1.1/help?
It should pass DNSSEC:
The only difference I can see between my result and yours is that I have connectivity to the resolvers over IPv6 as well as IPv4.
EDIT: I just noticed on yours it shows the AS Name as Cloudflare and the AS Number as 13335 whereas on mine it shows my actual ISP