Any modern public dns needs to support DoH these days, and the setup instructions should be directing users to set it up that way.

ISPs can and do sniff and block and rewrite unencrypted dns requests and responses.