Use adguard as private DNS, or use something like dns66 that creates a fake vpn and applies dns blocklists.

No need for root to block ads in 2025

The only thing that Google won't let the Magisk dev do is circumvent Google's own Play Protect stuff. That's it. He said as much when he got hired at Google years ago.

The problem is that Google is putting more and more things behind Play services instead of AOSP.

My bank lets me use my phone even if it's rooted, so the only decision is AdAway or Google Wallet. AdAway is winning.

But what I really want is a viable Linux phone and ditch Google.

I mean, you could use the private DNS feature instead of AdAway. No need of root for that. If you want to keep root anyway, IIRC there's a project called kernelSU, which being "in kernel" is probably less detectable than Magisk. Keep into account that - you would need to unlock your bootloader anyway, which sometimes can be a big "no" for bank apps

• I don't know if the project is still active.
• Someone has to have compiled a specific kernel for your device, with the requested patch, or you have to do it yourself.

I apologize if something is not exact, it's been a long time since I have looked into it.