particularly interested in this as well 
, XPrivacyLua. Anyone have experience they can share?
I like App Manager if I have root (need to do some testing with ADB over TCP,) (can’t block trackers without root) if I don’t have root Blokada seems to be a good tool for non-advanced users like me (to get VPN and Tracker blocking together, I want my IP masked and TOR is a bit slow for everyday use via InviZible’s TOR setting).
I have a setup on a phone running Magisk (root), App Manager (tracker blocking root level), InviZible (DNSCrypt), non-free VPN service (Mullvad, Proton, etc.) and it works good but it isn’t a daily driver and I am worried about updates with root (especially on a A/B slot setup).
Because of this I am leaning to go with a non-root setup. I am thinking of utilizing the Android system private DNS (Pihole or NextDNS) with Blokada 5 for VPN and tracker blocking, this runs the gambit I believe. I will also utilize Shelter for the worst apps and sandbox them away from my main profile. (trying to do away with non-FOSS apps, easier said than done).
Am I missing anything on a non-root set up?
*Running private DNS ain’t working with Blokada. It has the same issue as TackerControl, it can’t see the trackers to block/filter.
The more I learn the more it looks like rooting is the only way to get encrypted DNS, VPN, and tracker blocking all working together easily (not utilizing TOR via InviZible).