The hosts recipe configures /etc/hosts as well as tcpwrappers' /etc/hosts.allow and /etc/hosts.deny. These are totally unrelated and should be separated.