I think we should have an allow list approach at this point. Maybe a web directory of trustful websites.