Yeah, that's the only way to deal with this nonsense. Basically, block all devices that connect to your router from having outbound access and whitelist the ones you want to let through, with narrow firewall settings.