How can an app block ads system wide? I would have thought that apps are sandboxed. Just less strictly then websites. Can an app intercept the network communic

How can an app block ads system wide? I would have thought that apps are sandboxed. Just less strictly then websites. Can an app intercept the network communication at will? Can an app call any operation system function?