Honestly I run my own DNS server that’s configured to combine a shit ton of block lists.

But lately I’ve been sending all my traffic via WireGuard to a VPS where I have a subnet for peers to communicate on as well as a WireGuard tunnel for my multi-hop consumer VPN. It’s nice because my DNS server there caches everything from the VPN tunnel so that it’s a lot smoother.