These are valid points. Encrypted DNS stops your ISP from sniffing DNS requests, but does not directly stop them from seeing IP based traffic, and potentially d

These are valid points. Encrypted DNS stops your ISP from sniffing DNS requests, but does not directly stop them from seeing IP based traffic, and potentially deducing the domain name, if that IP address is from a suitably unique source. (Shared hosting might thwart this somewhat.) The slightly bigger problem is HTTPS with SNI, which leaks the host header in plain text before establishing the connection. It's an unfortunate necessity as long as hosting providers need to use virtual hosts behind a shared IP address, but it's also one more potential snooping vector to deal with.