So long as the query is passed over HTTPS, it is encrypted. But the domain/subdomain info is not concealed by HTTPS.

That would at least not reveal them in DNS queries, or the TLS SNI

Well they wouldn't be included in DNS lookups if they were not in the host name.