My ISP in the UK actually modifies the result of any lookup of google.com/google.co.uk regardless of if I am using their DNS or not.
I don't think this specific example is malicious (it's part of Google's Edge Network I guess? I wouldn't know), but it does show that they're already capable of modifying the DNS lookups ran by their customers.