The issue I see is also that they didn't notify the customer of what the law requires. The law requires they notify the customer that the customer can request content guessed to potentially be somehow harmful to minors be blocked. It doesn't say anything about the customer having to pay to buy software that they then have to operate themselves in order to block such content. The law, at least as far as I read it, puts the entire responsibility for blocking the content on the ISP - not the customer. So what the ISP is doing seems in direct contravention of the law.