Agreed. But I'm still using domain-based blocking on my router as an additional line of defense for clients that cannot malware-block.