Honestly, ublock isn't even enough anymore. DNS sinkholes are the next layer, since they work device-wide. I use nextdns.io, and it's good enough that I just keep ublock around in case I need to disable nextdns for some reason.

I use Mullvad DNS with ad and malware filtering.

How is DNS going to prevent javascript/css/tls fingerprinting? Its a good thing to do, but its not preventing you from being identified and tracked.