At first, Pi-hole was enough, but some devices had a software update a year or two ago that used Google (if memory serves) DNS as a backup. It was sneaky, but adding a block rule closed that loophole.

Not all devices had that change though. I'm hoping mine is old enough to be ignored for the new video ads.