I'm not sure what the issue is. My ISP can still intercept my DNS traffic and provide it to law enforcement. If it's unreadable because of encryption, how is that different than the fact that all my HTTPS requests are similarly unreadable?

They can't provide what they don't have. ISPs in the US (and I presume most countries) aren't obligated to ensure their customers don't use encryption.