So it was all a bit longer for the new broadband to arrive than I realized, but it is now setup and running the Smart Hub Plus. After I realised that the instructions are terrible - the controls are on the EE app (not the EE Home app) and not on the internal web page of the router (192.168.1.254), in the app I activated Advanced Web Protect and Safe Search. (the first two obvious settings), and they had no effect on filtering.
But after googling parental controls and seeing that creating a group to apply parental controls was involved, finding the (not as it says) groups menu was the next challenge, as it wasn't where it was implied. But by first selecting 'Add Schedule' to a device, I was then prompted to create my first device group I called 'Everything'. Then new devices after that joined the wifi went into 'Ungrouped devices'. Now both groups have the Moderate filter on, and all the porn sites mentioned in this thread are blocked which is great.
Additionally although you can't change the DNS settings the router uses from the internet to a different service like OpenDNS, even if a device force changes its DNS settings off the router, to Google 8.8.8.8 for example, for itself, it does not bypass the filtering, any traffic going through the router directly is still filtered. The only route that avoids the filters is the use of VPN clients by a device on the network, The 'Change blocked sites' categories does not have VPN as a category of blocking 'area', which perhaps EE can improve on, because OpenDNS does. However I may be able to force VPN connections to be blocked by the firewall if I can isolate the outbound ports used.
But for me, so far so good, without having to revert to some OpenDNS multi devices in the chain alternative.
