I have rokus and use a pihole plus NAT routing rules to force them to not use hard coded DNS so they can't reach their APIs and most ad domains and while not perfect I don't see many ads. Maybe the odd poster scrolling around to get to Plex or Netflix