A multi-layered approach is the best approach. My pi-hole blocks advertising domains, malware domains, etc. That helps tremendously with all the “smart” devices that include DVRs, streaming devices, etc. where you can’t install something like ublock. I also make sure something like ublock is installed wherever possible.