> They don’t hijack https they hijack DoH

DoH stands for DNS-over-HTTPS. You cannot hijack DoH without hijacking an HTTPS connection.

> they’re just going to get the recursive resolver from dhcp

In answer to my earlier question then, you're using your ISP's DoH DNS service, correct? If that's the case, there's no hijacking going on.

> People who bother to use something are the same ones who will tunnel traffic or run their own resolver.

This is the reason Firefox went with CloudFlare's DoH. Resisting ISPs' bullshit is much of the point.