I completely understand, but how will they access it? Over something like teamviewer where you can also see the screen and control the mouse keyboard would be preferable to ssh access where you have no idea whats happening until it’s over.

On the other hand, whatever he’s going to do he should hopefully know beforehand, otherwise it just sounds like a fishing session to try a few things.

Why limit yourself to just your phone, use a pi-hole and block ads for your whole network.

And when I’m out, I have a vpn running on the phone back to my home network and block ads on 4g/5g as well