[sneak]

Comcast is the one sending you the (unsigned, unencrypted) response packets from 8.8.8.8.

You might as well use the Comcast ones.

[Dylan16807]

Politically it's a lot easier to stop Comcast from altering through-traffic DNS than it is to stop them from lying in DNS responses and calling it pro-user.

[sashametro]

And if you use DNS-over-HTTPS to get your answers from Google, Comcast can't modify them.