Galaxy S5 had a removable battery and IP67 and is a 2014 phone. The technology was there, so it has probably evolved enough in this 9 years.

Easiest solution I found was manually setting a Private DNS on Android. Adguard public DNS address filters pretty much all of them.