Protecting your network only really works at the router level for this reason. Hence Google's push to normalize adtech like QUIC to evade this.