> Another attack vector is public DNS names that resolve to local IPs as well, like "lvh.me".

uBO LAN list blocks those as well, only except strict 1st-party connections, i.e if `lvh.me` is used as connections on other domains (including different subdomains), it will be blocked.