> I have little kids and don’t want them to accidentally stumble onto malware or porn sites. But I still don’t like this kind of policing happening at the DNS layer.

Where do you set up the filtering or accountability? With so many connected devices in houses I've found DNS is common denominator. It's perhaps the easiest to circumvent, but it covers all the mobile devices, gaming consoles, etc. that are connected to my home network.

My kids are too young to circumvent things, but if they start doing that I'll be equal parts proud and preparing for a loving talk.