the decision to pull dns blocklists from jsdelivr instead of github was a strategic one