That would mean to whitelist every 'known' os?
I think I would prefere a if it's broke, fix it approach.