I think tailscale could handle this problem pretty well: https://tailscale.com/kb/1114/pi-hole/

You can configure the default DNS for devices when they connect to tailscale. This way, pi hole is opt in for users who want to set up tailscale.

Disclaimer: I haven't tried this myself since I have Mullvad ad blocking setup and I'm lazy