@mistersixt @GambaJo Not to downplay the work of the developers, but if you're recommending apps over Rethink, you must know that:

1. pDNSf does not handle DNS over TCP (which we've caught some trackerware/spyware SDKs like Gamooga and InMobi using): https://discuss.grapheneos.org/d/8330-app-compatibility-with-grapheneos/81

2. TrackerControl (TC) inherits the limitations of NetGuard (which it forks). For ex, DNS requests for ECH ("encrypted client hello") are explicitly blocked. NetGuard (and TC) does not support Android's "VPN Lockdown" mode.