Let's not forget about SNI

The only SNI that the ISP can see is the SNI of the DNS provider. The goal was to protect the DNS queries itself from eavesdropping and that is implemented.