Another :facepalm:. With VPN on my DNS queries are not being leaked to my ISP. Also, there's this nice daemon which I use for DNS queries, it's called dnscrypt-proxy. So even when my VPN is not on, my DNS queries are always encrypted.
My ISP doesn't have access to my PC, nor they can install their own certificates.
Could your stop with your fairy tales please? I work as a CSO if you ever heard about that line of work. And now I'm not currently running Windows. In fact I have Windows 7 installed purely to play games. No work is done in this spyware ridden OS (telemetry updates, as everyone now knows, have found their way into W7/W81).