Forcing these probe requests onto Google's DNS would completely defy their purpose in the first place.
The problem with this is, of course, that a malicious resolver could detect this and NXDOMAIN those queries, while passing others through. I don't see what the incentive would be for ISPs to do that, but ISPs are weird.
I assume the reason for changing from a 10 char random string to a 7-14 char random string was exactly because some ISP's were detecting it...
https://chromium.googlesource.com/experimental/chromium/src/...
The real problem is not your ISP, but rather the fact that the most important sites on the Internet have rejected DNSSEC and aren't signed. DNSSEC can't do anything for you with hostnames in zones that haven't been signed by their operators, and, to a first approximation, every zone managed by a serious security team (with a tiny number of exceptions like Cloud Flare, who sells DNSSEC services) has declined to do so.
