Pi-hole blocking less than expected

Your debug log suggest you have enabled DNSSEC:

*** [ DIAGNOSING ]: Setup variables
    DNSSEC=true

Pi-hole-FTL v5.9 introduced extended logging of DNSSEC requests in September 2021 (jump to "Show automatically generated DNSSEC queries").

As a few of those happen for every domain lookup, it of course would have an impact on the blocking quote. Note that they did happen pre-5.9 as well, there were simply not logged before.

The release announcement did also refer to how to disable that via SHOW_DNSSEC, if you'd prefer not to see them.