Trying to do content filtering on the kids chrome books for remote learning, I installed a pi-hole and was generally pleased with it. Then the kids (8 & 12) figured out to change the dns to cloudflare or google directly. I ended up having to add static routes on the router to block those paths.
(I need to block distraction sites during instruction time - otherwise it’s endless Minecraft videos while in zoom meetings...)