Once you set it up, it’s fairly low maintenance. I’ve got one setup at my parents house with a cron job set to auto update blocking lists and software. The hardest part is finding the right combo of lists that block everything you don’t want but allow what you do.

The Pi it’s on also has plenty of power for a vpn server as well so I can hop into their network when they have issues or to do data syncing.

And yeah, I’ve brought it up with security and they’re thinking about network level blocking. They don’t like browser plugins that basically need access to inspect content on every single web page you crawl. Who knows what data might leak.