Nothing, as far as I can tell. End-to-end encrypted history and tabs, and recent versions with iCloud+ use encrypted DNS and VPN (iCloud private relay) that uses encrypted forwarding so ingress servers can’t tie your requests to a destination.
Outside of using Tor and your own VPN, it looks like Safari w/ iCloud+ protects browsing history from everyone (Apple and ISPs) while delivering a seamless experience.