only issue with blocking the proxies is that you can now decide to host the container on your own infra through docker, and it's documented by Google: https://developers.google.com/tag-platform/tag-manager/serve...
I guess this is very interesting for many people, especially in Europe with the "Google Analytics ban"
So use Cname? :D