Such TLDs have always been blocked here. My personal list of blocked TLDs currently contains 161 entries ...and counting.
Same here, I actually have allowed only about 10. It blocks majority of malware at no cost or performance impact, while benefitting the privacy. I replaced AV with DNS, it is much more effective and virtually impossible to bypass.
I have ALL TLD's blocked - "ALL" other than maybe 6 or 7 - except for the TLD's that I don't. 6 or 7 is still a very large net. I guess I'm just trying to say it's not the TLD that's the danger.