For some of my Docker containers in my homelab, I use plain 1.1.1.1 as DNS, and today I realised that my ISP is intercepting and monitoring the UDP packets and even modifying the DNS response packets to tamper with the results.
Never ever use the internet without DoT or DoH.