One click sandboxes ad iframes to block forced-redirect malvertising for 72 hours, then auto-reverts to your baseline mode above. Enforcement self-expires in the browser even on cached pages.