both are set to the tightest privacy and ad blocker status possible.
It doesn't matter how many of Safari's and other settings you turn on or off on your iPad or iPhone.
Since the concept of pop up blocking appeared years ago, it has been a continuous game between the a-holes that want to shove ads in your face, and those who want to stop these intrusions (Apple, Microsoft, Android, Samsung, etc.). The latter find a way to block the current ways advertisers have found to get around the blocks, and the advertisers figure out how to get around the new block. Lather, rinse, repeat.
However, as has been explained by Lawrence numerous times, the pop blocker doesn't work because the Amazon/Comcast/whatever ads aren't popups at all. Popups always appear on the same site you are currently on. These are redirects to a completely different site that is designed to look like a popup.
There currently are no settings in any device by any developer/manufacturer that can stop all such intrusions. Why, I don't know. The fact that ad blockers succeed in doing it means Apple, Microsoft, Android, Samsung, etc. also could by adding similar functions, but for reasons unknown, haven't. That could simply be a matter of "Why reinvent the wheel?". Meaning, why spend the time writing the code for an ad blocker when it's already been done, been done well by others, and are readily available in the App Store?