There won't ever be a passive filter. The QUIC traffic is deliberately opaque.

If you control the clients you may be able to retain your status quo for some time (by just refusing to upgrade) but the direction is away from having anything filterable. So client software or MITM are your only options.