> the more you learn to recognize what domains you need to allow in order to have the site working as intended

Sites using cloudflare are a major issue here, specifically their cryptic subdomains. If someone were to hide an ad network behind those they would be hard to tell apart from the rest, at least for humans.