[chgs]

> but that’s way beyond the technical capability of probably 95% of people.

It really isn’t, and even if it were an ISP could offer it. Indeed I believe most ISPs do (I chose one which is unfiltered, I do my own filtering at a router and dns level, the biggest threat is DoH)