That's kinda the minimalist solution
It's apparently a list of "known bad" servers it won't talk to.
A more sensible solution would be to drop the most abused features one by one in the roadmap after providing more sensible solutions. For example they could block loading Javascript from foreign domains after they provided their own cross vendor Javascript standard library.