the filtered fetch had no tests for how it fails: a connection that drops partway through the body now has to come back as a transport error, a forged block as a generic one, and a body over the limit has to stop whether or not it said its length up front. the dropping stub waits before it breaks, so the client is reading the body by then rather than still waiting on headers.