I've never seen a company that sanely implement their filters. How do they do that?

Unless you consider it sane to block anything that is not http.

But, well, the idea of filtering bad things from the internet is insane enough by itself.