Netguard uses a host file to provide incorrect DNS results to prevent ads and doesn't filter the data, so it doesn't need to install a user CA certificate. This

Netguard uses a host file to provide incorrect DNS results to prevent ads and doesn't filter the data, so it doesn't need to install a user CA certificate. This approach while generally effective can't block certain types of ads or tracking data that the other solutions or something like ublock origin in your browser can.