It's sort of a separation of concerns. There's no fine-grained way to say "intercept this list of URLs and deny some of them" without allowing it to also view and modify the entire content of every web page.