To be fair, Honey could easily bypass the blocklist redistribution legal issue by downloading filter lists at runtime from the official source. Then they aren't redistributing the resources.

Update: It looks like they're also using code from uBO without attribution or authorization. That's most likely illegal.