uBlock Origin + NextDNS has been a pretty amazing combo for me. If you want to really take it even further you can setup pfsense or any other edge router that

uBlock Origin + NextDNS has been a pretty amazing combo for me. If you want to really take it even further you can setup pfsense or any other edge router that supports IP blocking and then (at least on your home network) block the IP's of common DNS providers other than the one you want your devices to use. This stops apps and devices that have hardcoded IP's trying to do encrypted DNS (DoH or DoT) to bypass your preferred DNS choices. Its a bit of a game of whack-a-mole but I find they do not change all that often. Unfortunately of course this does not do anything for when you may be walking around using mobile data on a phone (at this point now only NextDNS would be in play - still better than nothing) but I suppose you could run a VPN back to your home network if you wanted to.