> preventing access to sites that distract employees and have zero business value (pornography, gambling, etc.)...

This is simplistic and almost certainly leads to overblocking.

Blocking a gambling domain sounds innocent on the surface but what if the gambling company publishes an article in their corporate blog to share how they solved a specific scaling problem or what money data modelling lessons they've learned?

It has happened to me more than once that I tried to read an article that was immediately relevant to my work but was denied access due to naive domain overblocking.

Please stop normalizing this shit.