Best Way of Blocking System In mikrotik

Hi Experts !! I want to know
What is the best method of blocking any sites, using Layer-7 or setting up address lists, or more?
or is there any alternative method for this?
please cooperate with me to have a concept about it!!
Thanks

Far from an expert but here is my take:
Layer-7 is rather heavy on your device.
IP addresses are never sure to be 100% correct (and can change).
So I’d say PI-Hole, that way it gets solved using DNS-blocking.

Interested to see other suggestions.

Please cooperate: read all thousand of posts about the same topic, instead to open again another topic for the same reason…

On few words:
You can not block anything until you do not have full control over devices used.
Just blocking the IP is a valid solution, but you must continuosly update the “blacklist”,
but the same IP are often shared for more than one service, because all network is moving on CDNs.