> There is no way to say in /etc/resolv.conf that you want to use a DNS-over-HTTPS server.
Sure there is:
nameserver 127.0.0.1
where I choose to run a nameserver which uses DNS-over-HTTPS on 127.0.0.1:53.
And so we get incredibly far away from the very laudable goal of protecting Internet users - the majority of who primarily use a web browser - by default from malicious DNS servers.
Chrome automatically upgrades known DNS providers to DoH.