I use AdGuard DNS. Not perfect (they can still log your DNS history), but it definitely prevents any interception or malicious code stealing passwords. DNS is a lot simpler than blocking extensions.

That being said, I do like Firefox's built-in tracker protection. I'd like to see more efforts like Firefox's canvas permission in the future, it definitely helps fight fingerprinting.

I guess Epiphany's lack of extension support works to my advantage in some areas.