Corporate support can be a big deal.

In a previous life, I routinely blocked anything from a free cloud host or cert provider. There was rarely a business justification for accessing a site or service hosted on DigitalOcean or signed by LetsEncrypt. Sure, get an SSL cert and host for your personal project - so I wasn’t mad at the services - but it was a signal that the endpoint was not trustworthy beyond the TCP packets.

I suspect that AWS/GCP/Azure has made that much harder.

That’s pretty cool. Gets the point across - and the reason and results of why it matters to report instead of ignore. Kudos to your team.