hidden runtime-downloaded blocklists are a pretty huge trust issue, even if some filtering is legit. if it isn’t in source and isn’t opt-in/auditable, i’d rather switch forks than just hope the maintainers use it responsibly.