I don't really see how DoH helps because the IP is still flowing between host and client. What does it matter if they can't see the DNS request? They still see the ip values flying between your computer and TheGreatSatan.us.xxx ? Only a VPN can help here anyway. DoH is good for making sure the IP matches up to the host address because it can verify the IP returned is the one that it is in actually rather than a state actor substitution.