@alice_watson We use pi-hole as well, with its upstream set to a local DoH proxy so that our ISP can't read any DNS queries going across our network. We don't use a recursive provider, so the upstream from the DoH proxy is still able to see queries, but at least they're in the EU and so will have some stronger privacy protections.

Really interesting that some of the TV ads get through, though. I wonder if that's the gravity lists not capturing that, or if they use a common domain to hide.