DynDNS? I’m not 100% sure what CF Tunnel does, but from my 2 min reading it seems that DynDNS would accomplish what OP described just as well.

The router sees that the DNS server didn’t return a result for one of the queries, so it goes to an upstream DNS server hosted by the ISP where they provide the IP for the ad

Nope. That is done by the pi-hole itself. The router would send a request, then it either gets the IP or it doesn’t, there are not retries upstream.

No ads and a flat design that hasn’t changed in years. I could be wrong though, I’m not in the US, I just read about it.

Craigslist? AFAIK their business model is quite forward thinking.

Then why don’t you try to educate people instead of scaring them back out of the seas? Genuine question.

It’s a easy as “don’t torrent without a VPN”.

BS. I’ve been torrenting in Germany for over 10 years and nothing happened. You just need to understand what you are doing. VPN and/or private trackers and you are safe.

What trackers?

Good VPN (I use PIA) > Docker > qBittorrent.

If you configure your VPN to be the only network available to your Docker Container, then leaks are technically impossible.

But if you just put qBt with a VPN and a proper configuration, it is almost as good.