...The reason most networks are modeled on default-allow is that default-deny is hard to manage.
What WhitewallManager aims to accomplish is to make default-deny and whitelists manageable with a sensible and efficient work flow. Currently it's a nightmare to manage a default-deny network.