I think you can get around this by installing VPN app (eg. dnscloak or 1.1.1.1)

Either install an app like the sibling comment suggested, or use one of these profiles: https://encrypted-dns.party/

Carrier-provided, not without third-party stuff, as others have explained. But the vast majority of users are on WiFi most of the time they are using their phones. When on WiFi, you can control the DNS quite easily.