If you complain that those show up in anonymized DNS logs and SNI is plaintext, perhaps you might wanna fix those instead? at least SNI should be fixed...