1Blocker mostly operates by pumping rules into Safari's rules engine, but it also has an App Firewall feature that uses VPN profiles. I've had some compatibility problems with that, but mostly it just blocks 10,000s of requests I didn't want my device to make in the first place.