> post-processes it

Or, in the case of the hosts file, blocks connections to IPs that may be malicious.

My ability to block ads in that way is a consequence of a key design decision of the network, one which we're far better with than without.