I think I understand most of the suggestions on your site about using encrypted DNS, VPN and VPN’s DNS servers.
The free version of the Proton VPN you recommend has an unfiltered DNS server. Is it reasonable to block name queries from clients without changing the IP address of the DNS server of this service and with the help of various filter lists (e.g. OISD full) in Adguard Home or PiHole?
In this case, both ads and trackers are blocked and the free VPN DNS server is used.