I personally prefer the security of my LAN, it has a Flint 2 running vanilla OpenWRT with lots of vLANs. As much as I believe do not trust your ISP to have your back I have 2 static IP addresses, one was going to host my email and the other would be my internet stuff. I than use wireguard to VPN into my LAN when I am out and about. I have not come across a VPN blocked website, but I have a very finally tuned pihole setup.

I am also not out and about much that I actually see any site that may have a VPN blocking site, but again my pihole is very finally tuned, some times I see the please turn off your ad blocker popup so I find the article published elsewhere, or if it is arstechnica (I think) I still have 98 years or something like that until I can read an article from them.

I also self host a lot of things so it is not like I am worried to much. I read up on my cities transit app and found out how horrible it actually is so I built my own (sorta) it tells me what buses I need to take to get places and it tells me where every operational bus is in the city. I realize it is vibe coded so it needs work, work I will be giving it when I get a new phone as I get out of the Apple Garden.