Can't they mimic the structure of legit content to get passed on the whitelist?