Right now the defaults are unencrypted DNS handled by ISPs which in the US have explicit legal permission to sell your data.