[sammy2255]

(which all are by default)

[WhyNotHugo]

That's a pretty serious security issue, which affects every other process on your host.

[NewJazz]

No, plenty of OSs ship encrypted DNS resolvers by default.

[josephcsible]

Zero mainstream OSs ship encrypted DNS resolvers by default, unless you count ones that will automatically fall back to insecure DNS, which defeats the purpose since a network attacker can cause that.