DNS without encryption should be banned. I just found out my ISP intercepts and even replies back from Google DNS servers changing the results. For example it does not let me query protonvpn VPN servers.