There is an extension to TLS 1.3 that supports encrypted SNI, and it has been deployed on some popular services since 2018.

Of course, your DNS is likely still unencrypted. But maybe one day we'll get there.