Strapped on time but wanted to start this off—I’m sure people will have more tips. If you’re able to set up NextDNS on the device or your network, there’s actually native tracking protection for Samsung specifically:
You can combine this with any other blocklist, and you could even outright block certain domains. You could even create a new NextDNS profile that blocks every request except whatever is required to run YT/AM on the device.