As you probably know I'm quite interested and active in testing different security approaches like sandboxing, firewalls and VPNs. Compartmentalizing with virtual machines is also a good strategy. Part of a good multi-layered defence is also a well curated hosts file like
this one kept by Dan Pollock and secure, encrypted DNS services. Better even if you can combine features of the last two and keep the nasties out with DNS level blocking. This will give us a much cleaner internet and might even negate the need for a browser level blocker like uBlock Origin.
