like, seriously, packaging Pleroma and then enabling MRF on a whitelist basis is a complete deviation from the default experience and it is not acceptable to refer to such a packaging as Pleroma. so, please do not do this, even if you believe it is necessary.
that decision needs to be made by the Pleroma development community as a whole: if you want the defaults changed, including to a whitelist basis, please open a bug and we can discuss it. but don't just change it in your packaging.
we want to make sure that the default experience is consistent across all platforms where Pleroma is made available.