SXR80 Content Filtering: wrong sites blocked and cannot apply content filtering settings

I am trying to use the Content Filtering trial and am running into several issues. The router is an SXR80 and SXS80 satellite running firmware 3.2.5.102. The router is configured as a router and is connected to an Xfinity modem. I have set the DNS to CloudFlare's 1.1.1.2 service (blocks malware),

I have the content filter set to block: compromised, criminal skills/hacking, gambling, hate speech, illegal drugs, phishing/fraud, pornography/sex, spam, spyware and malicious sites.

1. I found that it is randomly blocking a local government website (bellevuewa.gov) and hilariously the RaPaGa.com site of the content filter provider, a reseller of RaPaGa's product (wavonline.com). These are all classified in their correct categories, none of which are blocked. Interestingly, when I try to access the same website again, the request is not blocked, though I'm not sure if this is consistent behavior.

2. I use Roon's music management software and roonlabs.net seems to be getting blocked. I added a whitelist exception for this domain but even though I think it is saved, I get a notification telling me that "unable to apply content filtering settings for device"

Does content filtering just not work properly?