Let's stick with original topic, the DoH/DoT discussion has been fought on multiple other places on this forum. If someone needs to hide DNS requests from local ISP (while public provider is okay), encryption is required, that's it.
This indeed is an option, though not that easy to setup, via split tunnelling e.g., maybe someone writes a guide on this . Although, then you need to trust the VPN provider, aside of the costs this usually implies. In the end you always need to trust someone, and if there is a public DNS provider you do, maybe not Google or Cloudflare, but maybe Quad9, then this is a free of cost way to cover DNS requests from local ISP
.