piHole all the way - ahoy !
Surely the hardcore El Reggers are already running something like a piHole to avoid ads and trackers ? Not too difficult to setup DNS-over-HTTPS. In fact the newer versions might have it already running. I'm an earlier adopter and had to set it up by hand.
Of course the next step is a DNS roulette system which arbitrarily chooses a DNS route out of many tens as and when. Try to piece that together.
AC, obviously !