I don't see how moving to an even higher level of abstraction would help. At the OS level you can basically only block hosts (unless you're inspecting packages

I don't see how moving to an even higher level of abstraction would help. At the OS level you can basically only block hosts (unless you're inspecting packages but that seems excessive). Doing what uBlock origin does by loading dummy versions of common tracking scripts is a lot more effective.