nostr:npub1namj0ypwfctycz0lx78sdczy70fqxs76xuegzjlgmczpdrnlsvwsptl3t5 For a VPN (using the DNS services provided by it), I guess the only time a domain-name is seen by your ISP is when you're connecting to the VPN - otherwise it'll be hidden in the VPN's encrypted datastream. So, effectively, everything is hidden from your ISP apart from the initial connection - so perhaps arguably ECH isn't required if you're running a VPN.

Having read Tunnelbear's post, it looks like they'll support it for connecting to their VPN; that's all.