Yes, that seems correct. I saw in some logfile (don't know exactly where - squidguard.log?) something like "downloaded squidguard blacklistst ... expanding list ... is empty ... list removed from memory" or something like that. But it is blocking offending content, at least for me.