Presumably they'll keep the devices continually updated to keep up with the changing code of websites. Plus, they don't really have to block everything everywhere - this would still be useful even if it only blocked most or even some ads.

Regarding SSL, they could have the device issue an SSL certificate that you install on your devices and it could intercept that traffic as well.