Yeah, the biggest threat they pose is how many domains they see everything from.
Though they did use it well with that JS supply chain bullshit a month or two ago (and equally importantly, explicitly acknowledged in their announcement that it was an extraordinary measure and not something they wanted to make a routine thing).