I was considering setting something similar with Tailscale, I have a TS exitnode that sits on a VM alongside my VyOS/home router.

I'd tempted to setup a DNS Forwarder up on that with Ad-Blocking then use Quad9 as upstream, then just have Tailscale be always on.