EasyPrivacy gets a lot (most?) of the CNAME-cloaked stuff even on Chrome and MV3 because of efforts to detect and incorporate the subdomains into filter lists. AdGuard's public DNS server watches for CNAME cloaking and the subdomains get pushed to a list [1]. Or one could set their DNS to AdGuard and get the CNAME blocking in real time without filter list updates. uBO on Firefox is of course the more flexible solution but along with cosmetic filtering, this kind of thing would make it hard to notice the difference between a really good MV3 blocker and uBO on Firefox.

[1] https://github.com/AdguardTeam/cname-trackers