If you have a raspberry pi or some device laying around that you're happy to act as an always-on-server you could set it up as a Layer 7 firewall using something like Nginx to act as a reverse proxy for SSL/TLS interception.

Throw this into some LLM on research mode and I'm sure you could get some step-by-step instructions for setting it up.

I suppose it's not much different to a PiHole but instead of filtering out ads you're filtering out shorts.