Yeah tama ka.Eto naman theory ko about blocking, its not about payloads, well its simpler than you thought:
Ififilter ni globe mga numbers na wlang load/no promo/surfalert on at ioobserve kung may data traffic that is coming from those accounts. Once they reach a certain traffic, say 5 or 10 GB, then it is proven na may suspicious activity ung number na yon, kaya yun blocked.
naiiwan nilang bukas