I agree with your reply - root servers don't do DOT or DOH for recursive queries. However, there are experiments already under way for a few root servers to support DOT for authoritative results to recursive resolvers, and that is really encouraging for this kind of discussion of interception/blocking. See https://dnsprivacy.org/adox_status_and_deployment/ for more details.