The solution on linux should be to install system-wide "policy" extensions - they support webRequestBlocking. Possibly via system package manager.
In general it involves setting ExtensionInstallForcelist, but I haven't tried it in practice yet, it's a concept..