I suggest providing a beginner whitelist at least that includes popular cdns and such. People without umatrix will most likely put themselves at risk by blanket-allowing on uncooperative sites when all they need to do is allow Cloudflare.