More easily fingerprinted by which blocked script or request? (Personally I prefer a whitelist on these.)

If they rely on phoning home, such as a comparison of requests on different access, that's some top notch log analysis. Expensive too, compared to just running JS.