It's hard to see how they could account for it perfectly. I suppose they could inject an EDNS client subnet option into the request they make upstream (with the

It's hard to see how they could account for it perfectly. I suppose they could inject an EDNS client subnet option into the request they make upstream (with the original client's IP here), but that assumes that the target supports this option.