Ugh. So in the latest version of iOS there’s something called Connectivity Assist. If you’re running a #PiHole or similar then this seems to be bypassing it by instead routing the rejected requests over mobile data instead. Even the text below the setting says you should probably turn it off if you’re running an ad blocker. 109Mb I’ve used since upgrading for just downloading ads and trackers until I worked it out