well while that's true for the default setup one can use a number of methods to avoid this

1. run your own dns resolver and only query the tld root servers

2. use DNS over HTTPS from providers like Cloudflare

3. use DNS via TLS from providers like Cloudflare

4. Use a VPN provider for your DNS queries e.g. ProtonVPN DNS

5. Use Tor

6. Use Tailscale

7. Use a VPN provider

well while that's true for the default setup one can use a number of methods to avoid this

1. run your own dns resolver and only query the tld root servers

2. use DNS over HTTPS from providers like Cloudflare

3. use DNS via TLS from providers like Cloudflare

4. Use a VPN provider for you DNS queries e.g. ProtonVPN DNS

5. Use Tor

6. Use Tailscale

7. Use a VPN provider