What's the right solution to block trackers and other network access?

That’s not true. If you use a “standard” DNS service they can only track you by source IP, which is difficult to correlate with users, specially after you’re NAT’d by your mobile network.