You’d be surprised at how much an off-the-shelf firewall can see and categorize. A purpose built application that regulates/controls the physical network would have no issue with that type of traffic.

Easy. They would block traffic they can’t decrypt.

They would force a root cert to be accepted that they use to decrypt-inspect all encrypted traffic.

Whole home water filters is what you want. Work with a filter company to figure out what you need.

Your neighbor might have different test results. My parents moved their we’ll 50 ft after it got struck by lightning and the water was very different.

I also refill filtered water for drinking. 5gal jugs, has a dispenser with both hot and cold. I do u-haul style water, not a well. It’s from the city but I prefer the taste of the filtered water.