On iOS, there is a free adguard app that besides general filters for safari (and whole os) let you block youtube ads by integrating into share button(“view with adguard”), I think they put js in there. On android, situation is dare. You have to use dns/vpn blocking or firefox with uorigin and still apps that use webpart can do whatever they want. But of course on android you can get hacked youtube app without ads.