They can be blocked but not in a simple way for most users. If it was a preference synced with iCloud or at the very least in system preferences I’d be okay wit

They can be blocked but not in a simple way for most users. If it was a preference synced with iCloud or at the very least in system preferences I’d be okay with it but I shouldn’t have to fight with my OS. Plus I had to unblock ocsp.apple.com at one point because it was causing an issue with something else. In any case, defaults matter.