- Pihole, or adguard home (or whatever it is called), comes in for a somewhat answer!
- Wireguard into your LAN for when you are out and about, comes in for a somewhat answer!
- a openWRT firewall, that you can keep up to date rather than your ISPs, comes in for a somewhat answer!
- Self host as much as you can, comes in for a somewhat answer!
- FOSS as much as you can, comes in for a somewhat answer!
I have done a lot of this I am still working on the FOSS stage, I am sure there are other things I am missing but ad blocking at the DNS level is the first good step.