Correct, unless you are pointing Unbound at those providers using DoT. If Unbound is just using the root servers you would talk to the authoritative name-servers.