I don't get it. The word "whitelist" doesn't appear anywhere on the page, for me. Has the content changed? Or are you sincerely suggesting that nobody should ever load a webpage from a non-trusted domain?
I think they're suggesting we should default to no JS anywhere by default, other than sites one whitelists JS usage on.
IOW what NoScript (and maybe uMatrix?) does.