Comment by tsoukase

Marginally offtopic: DNS filtering was tricky for me. I setup a pihole instance with secondary DNS a regular 8s. But the router accessed both servers arbitrarily and not if only the first was down. So pihole is totally USELESS if you have only one instance.

For a mobile device, where ads are much more penetrating, I discovered the fantastic android option of "Private DNS". It forces ALL traffic through it. I inserted a free ad blocking DNS server which works though DoH (thank you controld) and all companies are ditched. On the desktop ublock guards the browser. Better a company to know some sites I visit than dozens to penetrate my digital life.