Normal
If all you have to protect are files, then your default-allow solution may suffice. Unfortunately, a lot of us have things like online banking, investments, emails, and social media accounts.
