Re: IoT?
"Unfortunately that doesn't really solve anything. The DNS requests will still go through the ISP router and be blocked or redirect there. "
Simply not true. Using your own router after the ISP one does allow you to control DNS resolvers, and you could use DNSSEC to prevent tampering if you had any remaining concerns.