The challenge lies in trying not to break any user-facing website functionality. Things like single sign-on, login with Google/FB, Share and Tweet This buttons, CDNs for static content, etc. We also had a goal of not blocking ads. These limitations require a more complex feature, but it can be on by default without upsetting users or publishers.