Personal choice, mostly. Both versions will work just fine.You can only
forward to their services if you are okay with Cloudflare/Google
DNS/OpenDNS knowing every domain you visit and potentially doing bad
stuff with that knowledge. In general, they ...
The printer program is likely to use a discovery protocol of the
broadcast type that will not be forwarded through VLANs. In the policies
that are a CLI option only, you can allow broadcast-forward. But in the
first place, this will defeat the intent...