Allow/block lists not applying to users' email aliases

Recently discovered that some users are added senders/domains to their allow/block lists but the emails are still coming through.

Come to find out all of the emails that went through were to one of their alias email addresses.

I checked and verified that Sophos is checking for aliases under the ProxyAddresses attribute in AD.

Is this a known limitation?