> whoever is in a position to create a whitelist and get it backwards obviously has a deeper problem re:RTFM

This is true, but also probably an indication that the term "whitelist" isn't as universally understood [by developers] as the "how dare you suggest using allowlist!" crowd suggest...