I agree that the policies are always ham fisted, but I'm not sure how you could have a policy that achieves the goal of blocking specific "bad sites" without it being ham fisted.

How would you achieve the goal of coming up with a non-ham fisted technical solution to a ham fisted problem?