I’m not sure how this is significantly worse than the DNS status quo despite being more centralized. Traditional DNS is very easy for everybody and anybody to

I’m not sure how this is significantly worse than the DNS status quo despite being more centralized. Traditional DNS is very easy for everybody and anybody to snoop and tamper with, including your ISP, the government, the resolver and anybody else with a chunk of network infrastructure on your path. DoH is very hard for anybody but the resolver to snoop or tamper with. The resolvers commit to not selling data and not retaining logs for more than 24h. Of course a court order will take precedence, but we’ve gone from “anybody who cares can see and tamper with your DNS queries” to “just your resolver can see and tamper with your DNS queries, and they’re audited so that'll probably only happen under court order”. All else held equal the increased centralization would make DoH a step backwards - but all else isn’t held equal, and traditional DNS is such a bad protocol that most of the advantages of its decentralization don’t actually manifest. And it’s not like the DNS protocol weaknesses are hypothetical - they’re used en masse by regimes and corporations around the world. With that in mind, I’d say default-on is a reasonable decision.