Quick question regarding DNS over TLS: is there any impact on latency over DNSSEC?
DNSSEC and DoT are two separate, complementary features. One does not replace the other, in an ideal world you actually want both. DNSSEC's role is to validate that the DNS query you received wasn't modified in transit, and that it came from the legitimate authoritative zone (provided of course that zone is signed, only a small percentage of domains use signed zones).
DoT on the other hand is used to encrypt your DNS query between you and the DNS servers so it cannot be spied upon. It doesn't ensure that the reply you receive is a legitimate one, you'd still need DNSSEC for that.
I would expect both of these to add some latency. DoT especially as it requires establishing a TLS session to transfer the DNS query exchange.