I would imagine the reason is that some ad provider used a fqdn to get around some badly written rule, and then someone added an even worse rule to block all fq

I would imagine the reason is that some ad provider used a fqdn to get around some badly written rule, and then someone added an even worse rule to block all fqdn to negate that trick.