If there had to be a choice, I'd choose a blacklist-only system over a whitelist-only system, if a blacklist and/or whitelist were implemented.