I agree that the policies are always ham fisted, but I'm not sure how you could have a policy that achieves the goal of blocking specific "bad sites"
without it being ham fisted.
How would you achieve the goal of coming up with a non-ham fisted technical solution to a ham fisted problem?