Both, I use a DNS level ad blocker on my entire network and use UBlock origin on my browser. That way most ads are killed outside of the browsers as well and it keeps my system from contacting malware servers by domain name at least.

Edit: Mind you, most of my apps are open source and have no ads to begin with, but for the few that are closed source. That’s what the blockers are for.