DoH, DoT, DNSCrypt and DoQ have been a good attempt to mitigate the privacy of DNS queries against a third party (especially the ISP), unfortunately they depend on the implementation of ESNI or ECH, otherwise when an https connection is established the SNI is transmitted in plain text and contains the domain name. The problem is that both browser and web server must be compatible with ESNI or ECH and this is practically impossible in practice, the adoption is very slow. I had hoped that this would go faster but given the case, the only viable option remains the use of a VPN since it encrypts both traffic and DNS queries. #Privacy does not matter 😢 .