https://www.macrumors.com/2023/12/06/apple-governments-surveil-push-notifications/
The US government is forcing Google and Apple to share push notification data with them. Even if the content is not sent, the metadata alone can let them know who you are talking to and when using metadata correlation.
uBlock Origin at a minimum. But I would suggest a privacy focused browser. Librewolf, Mulvad or even Brave. Browsers leak so much information about you it is easy for sites to fingerprint and track you even with an ad blocker.
https://privacytests.org/
I know Librewolf is working on their DNS leakage (last section on privacytests.org), but they also allow you to select a privacy focused DNS server which is nice when you’re not on a network you own, so you can’t run PiHole.