Yes DoT will prevent the DNS interception by the ISP/regulators. ASUS router for example will let you to use any DNS server that support DoT.

I believe most if not all major public DNS providers support DoT these days.

However, there's a minor performance hit on DNS resolving performance once DoT is enabled. It's mostly unnoticeable on a high-end ASUS router (BCM4908 and above).

More info about this on ASUS router: https://www.asus.com/my/support/faq/1051428/

Just want to ask. Isn't this illegal or against the ToS of these cloud service providers? I've heard of domain fronting before and I thought it was mostly restricted. Or is that a different thing altogether?

They can implement a blanket block on both DoT and DoH for public DNS if they want. But for now, DoT works.

If they enforce a strict block, just get a cloud instance in SG for $5 a month and VPN everything there.

I still think the risk that you can get banned for domain fronting should be highlighted in the guide since you need to input credit card info, real name/address, etc. to register for AWS.