Good point in many contexts but in my case, it doesn't matter because I only want to use it for statistical analysis of risk - it doesn't matter if I have some false positives. The larger the list the better, really.