@darius Really interesting idea. Can I link to that from the thread modeling post? I've already got a paragraph on looking for alternatives between allowlist and blocklist, so it'd fit right in