So after being happy that I had everything set-up on domains.google with dynamic DNS. I was playing around with letencrypt and realized that Google DNS with Google Domains at least does not support automation.
So I found https://desec.io/
1. Free
2. Supports Dynamic DNS Updates
3. Support the letsencrypt / Acme DNS verification protocol, this lets you add wildcard letsencrypt certs.
Since I want to setup a reverse proxy on opnsense having both Dynamic DNS and wildcard letsencrypt certs is really handy.
I hadn't heard of https://desec.io/ until was going through some HA proxy guides for opnsense.