Exactly. And most consumers do not have a choice what ISP to use. So their options are either a) Use comcast's DNS [comcast has had a history of doing questiona

Exactly. And most consumers do not have a choice what ISP to use. So their options are either a) Use comcast's DNS [comcast has had a history of doing questionable things] or b) use another DNS like cloudflare that claims to be safe / secure / morale. Short of running your own DNS server, there's not exactly a lot of options.