That's fair!

I feel like a permission list is kind of a superset of a block list and an exclude list. Or they're all different perspectives/solutions to the same kind of problem, that a permission list is the more generalizable solution for.

Or it's a way of framing the problem that doesn't embed the "exclusion" idea in the naming.

And it kinda bridges over to the idea of Access Control Lists a bit better?