Content filtering apps are fully compatible with GrapheneOS, but they have serious drawbacks and are not recommended. These apps use the VPN service feature to route traffic through themselves to perform filtering. This approach is inherently - incompatible with encryption from the client to the server, which the AdGuard app - works around by supporting optional + incompatible with encryption from the client to the server. The AdGuard app + works around encryption by supporting optional HTTPS interception by having the user trust a local certificate authority, which is a security risk and weakens HTTPS security even if their implementation is flawless (which they openly