Still maybe from a legal standpoint and depending on countries it'll be better to download and locally test against a hashed set than to download the dump. An

Still maybe from a legal standpoint and depending on countries it'll be better to download and locally test against a hashed set than to download the dump. An adequately hashed set can be proved to be harmless because you can't revert to real data (as far as you know when downloading). Downloading the original set could be considered malicious by some governments (but idk/ not sure ianal).