Use Pi-Hole for a long time.
I also like uBlock Origin.
Next DNS looks like a very good alternative. I mean using the pi for something else for 20$/year + no maintain work looks not that bad :P
services like NextDNS will be the only way to effectively block intrustive ads and malicous content
The only way? The only way if we do not do something else I would say.