diff --git a/4.1-Extensions.md b/4.1-Extensions.md
index 4421611..5e9d68a 100644
--- a/4.1-Extensions.md
+++ b/4.1-Extensions.md
@@ -4,11 +4,6 @@ Also, see [this sticky issue](https://github.com/ghacksuserjs/ghacks-user.js/iss
 
 If you would like to submit a privacy or security related extension to be added to this list, please post the details [here](https://github.com/ghacksuserjs/ghacks-user.js/issues/492) for consideration, thanks.
 
-Legend:
-- <sup>✔ [Privacy]</sup> privacy policy link <sup>we will not recommend extensions with bad privacy policies</sup>
-- :green_heart: Extension under development
-- :purple_heart: Extension maybe / depends
-
 ### :small_orange_diamond: Extensions
 These are all, where applicable, best configured to `deny-all` and whitelist.
 
@@ -49,6 +44,19 @@ These are all, where applicable, best configured to `deny-all` and whitelist.
 * [uBO-Scope](https://addons.mozilla.org/firefox/addon/ubo-scope/) | [GitHub](https://github.com/gorhill/uBO-Scope)
 * [Detect Cloudflare](https://addons.mozilla.org/firefox/addon/detect-cloudflare/) | [GitHub](https://github.com/traktofon/cf-detect) | [claustromaniac's fork](https://github.com/claustromaniac/detect-cloudflare-PA)
 
+### :small_orange_diamond: Don't Bother...
+* Ghostery, Disconnect, Privacy Badger
+  * They add nothing uBlock Origin doesn't already cover
+* Chameleon, Privacy Possum or any other extension that raises entropy
+  * We support *lowering* entropy. UA spoofing is best left to *privacy.resistFingerprinting*
+
+---
+
+Legend:
+- <sup>✔ [Privacy]</sup> privacy policy link <sup>we will not recommend extensions with bad privacy policies</sup>
+- :green_heart: Extension under development
+- :purple_heart: Extension maybe / depends
+
 ### :small_orange_diamond: Legacy Extensions
 
 * :green_heart: [NoScript 5.1.8.4](https://addons.mozilla.org/firefox/addon/noscript/versions/?page=1#version-5.1.8.4) <sup>✔ [Privacy](https://addons.mozilla.org/firefox/addon/noscript/privacy/)</sup>
@@ -76,8 +84,3 @@ These extensions will not mask or alter any data sent or received, but may be us
    * An alternative to SSleuth, changes Firefox's (lightweight) theme according to the security status of the currently opened web site
 * [Live HTTP Headers](https://addons.mozilla.org/firefox/addon/live-http-headers-clone/)
 
-### :small_orange_diamond: Don't Bother Recommending These...
-* Ghostery, Disconnect, Privacy Badger
-  * They add nothing uBlock Origin doesn't already cover
-* UAControl, User-Agent JS Fixer, or any other UA extension
-  * We do not recommend UA spoofing (see section 4700 in the `ghacks user.js`)