I was hoping to not need to have to put every device into a group, as it arrives, but rather do this to all devices (which come and go randomly, changing considerably over time, like say if the kid's schoolmates come over for a visit, and bring their own devices).
If I'm going to reach into sqlite and manipulate it directly (and not go through an API call), would it be advisable to temporarily lock the database, by stopping the lighttpd systemd service temporarily? I don't have a sense of how concurrency-safe such a change as yours would be.
Furthermore, if I'm going into SQlite directly, then my sense is that I can also find the Facebook Adlist, and turn it on and off manually, just like the group can be enabled and disabled.