Additionally, without “Enforce Access Control”, a user can bypass blacklisting & safe search by overriding DNS servers on the user device. With “Enforce Access Control”, DNS override is blocked.
Also, the router logs Internet activity only when “Enforce Access Control” is enabled.