See my last 'graph. Different devices would be assigned to different VPNs or VLANs. It's not an absolutely secure system, but it strikes me as at least as fun

See my last 'graph. Different devices would be assigned to different VPNs or VLANs. It's not an absolutely secure system, but it strikes me as at least as functional as present systems, and far less intrusive. It would require content providers to self-label where possible, and be subject to third-party labeling where the provider/publisher itself doesn't, won't, or cannot. I've reasons to believe that most would be reasonably willing to participate.