So, like, you are assuming someone using a resolver that ignores the certificate chain of trust, as an evidence that DoH is not useful?
Do your program language _show_ you the certificate information when you use an http library to connect to an HTTPS service?
Sure the other end of the DNS query may not be encrypted, but I can easily decide which government to trust, and run my DoH server there.
