I second NextDNS. You can have different profiles on your account so I have one just for the kids devices that is pretty locked down and one for me that is less restrictive for us adults in the family. I used to run a PiHole a few years back, but having NextDNS on the go is very very nice.

I think my only gripe is it blocks a lot of email unsubscribe links so I have to allow list them to unsubscribe and some wifi hot spots with captive portals (like when flying) breaks third party DNS providers, so I have to turn it off to connect.