Firefox defaults to using DoH with Cloudflare. Less evil than your ISP seeing DNS queries but CF aren't doing it out of the goodness of their heart.