If we put on the authoritarian hat, it should be easy for us to tell how easy it is to implement default blocking for all and whitelist a few source IP to everything. No?