[coldpie]

Sadly requires root, which is a higher bar than I'm willing to clear.

[hobs]

As the phone manufacturers are the same as the danguses adding ads everywhere, the only other option I can think of is to proxy your traffic through another service that does server side ad blocking, and that seems like quite a headache if you want to, for instance, unblock certain content.

[majewsky]

At least at home, I do DNS-level adblocking, which should be good enough for all devices that use the DNS resolver advertised by DHCP. (Source code is at https://github.com/majewsky/system-configuration/blob/master... if you want to copy this.)

[hackney]

Well if you don't run a firewall, I use NetGuard, you could run adguard. The payed version will protect all your aps whereas the free one just protects a few browsers (which can be done easier with the browsers themselves).