ublock origin will help.
but does your org do any kind of DNS filtering? depending on your setup (office or remote, etc) setting up something like Pi-hole[0] can offer a tremendous amount of time & hassle-saving as so many of the problematic ads will just not get to your folks.
a more managed equivalent of Pi-Hole might be AdGuard DNS[1].