Signal. Though SimpleX is growing as a superior private messenger.

I think, OP is pointing to the fact that ECH makes it harder to block connections to mothership from proprietary apps, TVs etc. These apps could now use ECH, DoH to hide it’s traffic from being observed.

But OP could always buy a better router that can proxy layer 7 traffic and block the traffic if desired.

Tailscale already has Mullvad integration. Why don’t you utilize that?

Desktop = Fedora

Home server = AlmaLinux

Mobile = GrapheneOS

Router = OpenWrt