There is no published policy for how and why things get blocked. The behavior of the firewall changes over time.

The subdomains problem seems to do more with DNS replication and pessimistic acceptance of DNS records more so than a person actually censoring content.