I think Apple has adopted a denylist instead of permitlist approach. They let all iPad and iPhone apps run unless the developer puts their app on the denylist.
I.e what is done explicitly defines the color. Explicit Allow (blacklist opt out) -> whitelist Explicit Deny (whitelist opt out) -> blacklist
That's a blacklist.
The key here is that the developer can choose to opt-in/out when uploading to the mac store (defaulting to opt-in), however older apps will be opt-out by default (as the developer didn't have this choice when they uploaded).
And because it’s likely implemented like that, you can either generate a whitelist or blacklist if you want, but in reality it’s highly unlikely it’s implemented as either of these things.
But regardless it seems like this whole thread is just about semantics anyway.