I run wireguard + pi-hole (docker) on a cheap vps. It was fairly easy to setup and does a good job. Still, not an ideal setup for non-technical users.