public DNS

How can I add public DNS failover while keeping Cloudflare authoritative?

I want Cloudflare to remain the source of truth for my public DNS, including DNSSEC and records published by PowerDMARC, but I'd also like a secondary DNS provider…