And embedded stuff aside, a system with a firewall whitelist on a separate box is unusable for daily use...