You can set up a Zero Trust policy with block lists and use it with the 1.1.1.1 Warp app on any platform, which provides not just DNS but VPN too. It's more sophisticated than NextDNS, the only downside is that because it's an enterprise offering, there are a ton of options and it's a bit complicated to set up.

There are built-in blocklists for malware, suspicious domains, and much more. To block ads and trackers requires uploading custom block lists, which requires manually uploading a csv file (annoyingly, limited to a maximum of 1000 entries per file).

https://developers.cloudflare.com/cloudflare-one/policies/fi...