That will work... until you plug that drive into a fresh OS. Or you reformat and forget to unplug the drive before you set up the whitelist. Or it's spotted on a network drive by another PC running Windows Defender.