With encrypted DNS queries becoming more popular, it is impossible to block something at the router level without decrypting the packets which bring up more privacy concerns.