Instead, I used the following config (ref):

/etc/NetworkManager/NetworkManager.conf:

[main]
dns=none

/etc/resolv.conf:

nameserver 127.0.0.1

/etc/resolv.dnsmasq.conf:

 # IPv4 nameservers: 
 nameserver 1.0.0.1
 # IPv6 nameservers:
 nameserver 2606:4700:4700::1111
 nameserver 2606:4700:4700::1001

/etc/dnsmasq.conf:

 resolv-file=/etc/resolv.dnsmasq.conf

Restart NetworkManager and dnsmasq (or reboot/re-start shell)