Source whitelist doesn’t really work well as it means adding every self-custodial source too. Ideally that’s everyone in future.