AdGuard system-wide blocking wasn’t working, so I opted to go all in on AdGuard and turned off private relay.