[puttycat]

Yes, a very easy and destructive man-in-the-middle attack seems likely.

[pradeep1177]

But the whole point of this is to prevent the distillation and identify the list of blocked providers. If a provider is capturing the proxy, they can identify and modify that as well, so it only looks legitimate to the model. What am I missing here?