How about blocking all tracking, ads, malicious sites and more at the DNS level? I have been using NextDNS for a while know I really like it.