Pi Hole is a good first layer, but good sites occasionally have bad shit on them, so you can't rely entirely on host-based blocking.