This is a nation state level actor using a public ad network.

If your one of the targets of this, none of those measures will help. At best, the adblock will work for the publically known ad networks, but they'll get you with an ad served from a fresh domain. And if they are using zero-click exploits, they likely have a persistence mechanism as well, and even if they don't, they will probably exfil all your data as soon as they can anyway.

The good news is that most people aren't actually useful targets to nation state actors, so all of us are likely safe. We aren't worth risking a zero-click zero day on (or the persistence exploit). Journalists/politicians/military personnel though should be a lot more concerned, but they already have solutions like airgapped networks and other opsec tools.