As long as the default is to globally block and that enabling for a single site is as cumbersome as possible, that's okay.
Though I agree that it would be good to not turn it on by ok-clicking like our parents always do. “aA -> turn on” would be enough, popups definitely banned.