Whilst SNI does identify the endpoint (typically, hostnames), there exist solutions to trivially "obscure" (not encrypt) that information from ISPs / censors that do not run a stateful firewall which are relatively more expensive than stateless firewalls. This is how DPI circumvention tools like Intra, GreenTunnel, and [https://github.com/ValdikSS/GoodbyeDPI](GoodbyeDPI) bypass the prying eyes of ISPs / censors... Source: over 2 years ago

So NetGuard lets you analyse traffic, but TrackerControl is likely better at it, and they both develop on top of the same code base. Re: Blokada: I don't consider it to be a serious security application at this point, though it does have the potential. There are simply too many holes in their implementation. Intra is a better DNS client which one could use with something like AdGuard DNS. Source: about 3 years ago

There are third party solutions to fraud that actually work, providing chargeback insurance. Essentially, they screen transactions; if any approved transactions are chargebacked, they refund you. A good start point is https://signifyd.com We dropped in this solution on our e-commerce about 5 years ago; fraud has been a non existent problem. - Source: Hacker News / over 1 year ago