Both http/2 and http/3 made TLS mandatory. The DNS part was already handled by someone else. As for the MITM https you are at the mercy of the browser, they a

Both http/2 and http/3 made TLS mandatory. The DNS part was already handled by someone else. As for the MITM https you are at the mercy of the browser, they are depreciating the API they might restrict this as well if it will become the way to do filtering.