[tmottabr]

this is why we need DoT and DoH everywhere.

If my resolver can connect using DoT or DoH all the way up to the root servers then ISP cannot intercept or poison it..

And making ISP block the IPs is the correct way to approach this problem..