This looks like a good idea for everyone, though from your blog post, it’s clear that there’s a massive gap between the DNS firewalls that work and those that don’t, assuming the numbers you cite are accurate and I believe they are.