I haven't used these, but the problem here being that the user who can set up a whitelist will (presumably) be just as easily able to edit the whitelist.

Along with that I've had issues in the past with whitelists where I disabled something where the IP address wound up being a dependency for something else I was using.