Do you actively block then grant-access to everything, or just periodically check what's happening? I've tried the active filter before, but found it to be very disruptive to my typical workflow.
But I can see how this can be a disruptive process, when all you want is some work done. I wish we lived in a place where I did not have to use tools like this.