I would wonder if the whitelisting is in-house or part of their contract? If it's in-house then the added cost to maintain the whitelist (in-house expertise),

I would wonder if the whitelisting is in-house or part of their contract? If it's in-house then the added cost to maintain the whitelist (in-house expertise), while not much comparatively, isn't nothing.