Yea, its pretty common sence to check all profiles DL from internet for such issues as vendor rules.
The Global protected items, integrated in HB are still not handling all WOD goodies, so its on our own to maintain it, so not-vendoring anything but gray items is a good idea for start.
Exactly 100% right