Restricting arbitrary data IS building a whitelist. You're just framing it backwards. If consensus enforces what's 'legitimate' data, someone decides what that means. That's editorial power on a permissionless ledger. Different label, same governance problem.