Ideally, you would have zero iOS or Android devices in your household

*besides custom Android distributions that respect privacy ;)

I know Proton VPN offers NetShield to its paid users. I forgot about DNS filtering because GrapheneOS doesn’t recommend using it over a VPN and the filters can make you stand out, but that’s just me. Good gift idea!