You should be using a DNS filter ideally so it never hits the device in the first place. Adding an extension only increases browser attack surface.