I could see that working if it wasn't done naively. Prompting for confirmation and then whitelisting that high-entropy string if it is deemed safe would probab

I could see that working if it wasn't done naively. Prompting for confirmation and then whitelisting that high-entropy string if it is deemed safe would probably only be annoying very occasionally and catch slipups. Did they ever revisit it with a more nuanced strategy?