First line of defense is local DNS based adblocking followed by Brave on all devices. The only time I see ads or Eurocrat cookie nonsense is when GitHub rate limits access to the updated filter lists. Let's hope this will hold for a while.