In any managed firewall service, you would rather not have any blanket statements. You want to deny traffic by default, not by exception.