Yup. They can only offer limited built-in protection due to their revenue source, but important to note that unlike Chrome they don't dictate on what extensions can offer.

So they are practically speaking the only game in town (Brave being the exception on Chrome as they are keeping support for UBlock Origin)

Firefox Nightly on Android also allows desktop extensions to be used.