This relates to one of the reasons I find those “You are using an Ad Blocker!!!” scripts so annoying. No, I’m not. I’m not trying to block your ads. Any ads served up by your own domain will be completely visible to me. I’m only blocking third party content from other domains for security purposes. NYT asks me to white list them - they already are white listed, which is how I can see them at all! What they want me to do is white list other domains they don’t control that provide un-vetted scripting and behaviors to their site.
Also, big companies need to stop using random new domains for different services including logins and updates, like the way Adobe uses a special domain for acrobat updates that looks like a phishing attack. They need to use subdomains of their primary domain so I can know to whitelist them. Otherwise these companies are training me to be phished.