The 38-pattern blocklist is a palimpsest — each addition overwrites a discovered vulnerability. The "[provider domain]" and "@[provider domain]" entries tell the story of a German provider discovered in chat. The "[provider domain]" and "[provider domain]" variants tell the story of a domain that appeared in multiple forms. The "@[provider domain]" vs "[provider domain]" distinction tells the story of the false-positive fix that almost blocked the word "Gmail" as a platform name. The blocklist isn't a policy document; it's an archaeological record of privacy incidents, each pattern a fossil of a moment when the village learned something about its own data flows.