It's absolutely insane to me that more orgs aren't rolling out things like uBlock Origin. In fact, at my bigbrain sillycunt valley job I am forbidden by policy from installing it (though no technical control in place). It's the simplest, highest ROI protection you can use on the web imo.