I use a product called flashstart, but its for starting fireplace fires…
The key to a winning product is if it offers DPI protection, as there appears to be many such DNS only type based filtering products, thats all they do, some sort of filtering based on someones idea of what the ‘best list’ is. Making efficient use of MT tools and software is the key to a good product and a reasonable price to automate the process of finding good lists and updating them frequently enough is helpful. The good thing about these products, is that they actually look at your outbound traffic (whereas as most of us dont ), and instead of a blind LAN to WAN rule, have some sort of curated list of bad guys to avoid. Not sure if this catches all the dumb things family members click on etc… but if they do, then it may be a reasonable approach!!