Might not the thing you are looking for, but I tried to find a replacement for Keep a year ago and somehow stuck with a todo.txt (http://todotxt.org/) file. It can be edited in a normal text editor but I use Markor and todo.txt on Android and Sleek on desktop. Sync is fine via your preferred sync tool.

As far as I read (I’m no expert!) they could check the SNI of the TLS handshake if they want. But using the DNS of the ISP is handing them the data right in a way they can analyze/use them very easily afaik?

Still learning about this topic!