DNS level is more secure but less effective because apps and website can serve the essential content on the same domain as the advertisement. It will also become less effective over time.

YouTube does this, so you need to use a browser-based ad blocker.

Let them eat cake. Setting up that ad proxy stuff is a bunch of work that many websites won't do.