As I understand it, AdGuard uses (in addition to a browser extension) a system-level local network proxy so can do anything to requests and responses?

Confusingly, there are 3 offerings: "AdGuard for Mac", "AdGuard for iOS" and "AdGuard for Safari" and I think it's the first 2 that are the good stuff, even for Safari.