Obviously, “It Depends™” but usually an allowlist is better than a blocklist because it fails closed in a sense.