You encrypt your emails, pay for a VPN, enable Tailscale. Yet your ISP knows you visited Tinder.com last night. DNS, that's why.