Thanks, yeah, I've been using Ublock Origin plus some local DNS blackholing when browsing on my laptop, and will do the same on a pi if I use one.
Maybe I'll now see if I can figure out if something is misconfigured on my 400, instead of buying a 5 or 500. I have some FOMO because of expected further increases in ram and ssd prices, but meh.