It won't be long before people start using LLMs to write such whitelists too. And the APIs.