One of the main plagues of modern data processing is malicious software. Suppliers spend a lot of time to block access of malicious files on the Internet. A simple way would be to completely disconnect from downloading malware and hosting servers. Knowing which sites are bad would be enough to prohibit users from connecting to them. It would be a way out, but as usual, it has its pros and cons.

https://www.helpnetsecurity.com/2019/12/04/how-dns-filtering-works/