This is a battle that you will loose - expect at some point to have to ask for the WiFi details and the Hub admin password !
Education is better than enforcement, especially as current versions of Windows and of Android include tools to randomly change the MAC address.
As fast as you are blocking a PC or Mobile etc it morphs into a new identity and is free again.
There are quite a few posts on this forum where the poster blocked the wrong device and now their own phone or wife's work computer is blocked and the pausing system breaks so the devices have to be manually removed from the Hubs MAC Filter list.