So you believe that Google is sharing the personal details of everyone that watches particular videos with some shady left wing cabal of pundits? Maybe it’s just an inappropriate video.
They even cited the exact episode, there are plenty of other ways to see that clip if you don’t want to log in. And isn’t it always republicans passing laws requiring ID for “adult content”?
DoH is good, but it wouldn’t help much in this scenario. Even if every website you connected to supported Encrypted Client Hello, IP addresses greatly narrow down which domains you’re connecting to.
But realistically using DDG to generate a password is safer than downloading a local program to do it, an attacker would have to break into DDG and MITM your internet. For a local program all they have to do is compromise the site you download it from, and maybe the developer’s signing key if you check that.