A few days ago Kazakhstan gov-t passed a law to enforce using gov-t signed SSL certificates on all https traffic on all (almost) ISPs. So when you visit https://google.com your browser will warn that the certificate is untrusted and you must have to trust or install those certificates manually.
In short, you use gov-t issued certificates to encrypt your traffic which is then decrypted again on ISP level to be then encrypted again by the original (valid) certificates before being sent to the websites you access. Which basically means ISPs can do whatever they want with your data as if you were using HTTP all along.
AFAIK, one solution would be using a trusted VPN service. However this drastically worsens the usage experience and essentially makes you trust to the VPN Provider (which majority don't care to check).
So my question is: if I were to change my DNS to say,
Cloudflare, will it prevent my ISP from acting as a middle-man?
Edit: if it won't help, what can I do to protect my privacy?