thank you for the tip! I use an OpenWrt acces point that is on my desk and uses dnsblocking through blacklists. This way I have a wired and wifi network that block the most annoying stuff by default. It also integrates nicely with wireguard too.