You can allow everything by default too with HTTPSB (it still will use blocklists and protect you), so that you won't have to enable stuff for a website to work.
Is it adding "whitelist *" somewhere or something similar?
I expected this to be a part of the extension settings / options, but ah well.
The "all" cell (top left corner of the matrix) is a "soft" allow all, i.e. it allows everything except those hostnames and types of request which are not specifically blacklisted.