DOT picked an odd port, DOH uses 443. Otherwise they both have the benefits of TLS.