DNS-based ad blocking is the way to go. Apps load tons of telemetry, and you can sprinkle in malware protection too. I prefer the DIY approach of Unbound + a ton of blocklists, but the solution is essentially the same.