Dumb question as a non expert, but if I'm trying to prevent bad thing from happening on my employees phones, why am I blacklisting "bad" apps instead of whiteli

Dumb question as a non expert, but if I'm trying to prevent bad thing from happening on my employees phones, why am I blacklisting "bad" apps instead of whitelisting "good" apps?