DOH and ECH via mullvad browser after Air connection

[iwih2gk 100]

We always discuss how slick using TOR on top of AirVpn creates a spread of exposure between two or more separate providers making a "trace" orders of magnitude tougher than Air alone.  There are times when I must vacate TOR due to speed when downloading very large files OR uploading very large files.  In an effort to maintain the obvious benefit of using two different providers on my over all connection I am wondering if I have the following correct:

I have been using Mullvad Browser with dns = DOH + Encrypted Client Hello processed by Mullvad's DNS in the browser configuration.  When I examine the connection via various websites designated for the purpose of course Air's IP is what Mullvad sees.  The ECH flags as working well and stable (I realize the sites I connect to must use TLS 1.3 and have other configs for ECH setup, but that is a given in this question).  So in this scenario I assume that Air (I do trust but then using two services just adds the confidence out of SOP for security) would not be able to penetrate the DOH and the ECH would eliminate the sni from wireshark or similar observation?

Is that configuration doing what I need to do, at least am I explaining it properly?  I have always trusted Air staff/moderators to serve it to us straight up.  Is my procedure effective for what I describe or is there a better solution keeping in mind KISS is how I prefer to roll, LOL

ps - I live on TOR most of the time so this is for when I need the multi gig loads in either direction.  Thanks