Eeeh, kinda. A local DNS server is the only way I’ve found, and that causes problems on apps that block the “VPN” status and completely breaks cellular data.

It also doesn’t always work, particularly if the app isn’t covered in your blocklist (which it isn’t always possible to add them in any easy way, because “think different”)/the app hosts ad content directly.