Correct, the whitelist would be maybe 10 or less TLDs and certainly shorter than the blacklist would have to be.  This could work.  Doing it this way I think I'd need a high score on every message then follow-up with a negative score for each TLD on my whitelist.  Having a dedicated list would be somewhat more intuitive so I'd still request the feature at some point in the future.