Does your work computer only allow access to whitelisted websites? I hope not, because that would make it really hard to get anything done.

Security always involves trade-offs. Unthinkingly choosing the most restrictive policy every time is not a good security practice.