testing whonix 14 - debian.org makes apt update fail on gateway

just trying out whonix 14 and found that apt update fails on the gateway because there is no dns resolution for security.debian.org and ftp.us.debian.org which are both in /sources.d/debian.list along with onion mirrors which connect fine.

is this just a hangover from testing with dns turned on and will be changed upon release and they should be commented out?