This can be easily mitigated by running locally Technitium DNS Server and the adding the hosts file in block list.

we already have "build cities under the sea" using NAT!

Better option is to use local DNS server that supports dns over tls or dns over https. This works for all apps and not just one browser. And, you get to decide which dns provider to use.

There are many other service providers that have this stupidity. Like in India we have SIFY NET which is having same problem, its reads only first 8 chars of password.