[tksb]

For what it's worth, the "sometimes forget I have it running and then I browse on mobile away from home and get bombarded with ads" bothered me enough personally to attempt to smooth it over. Ended up using Tailscale DNS so that every device on my tailnet/VPN benefits. It was painless and has been solid for ~4mo now.