I have AdGuard DNS set up (mainly use HaGeZi lists) for system wide blocking + AdGuard content blockers to catch some web ads and annoyances that cannot be caught via DNS.
Works very well, it’s been a good long while since any ad cheapened my web experience.