Block by default is inconvenient to users. Community driven blocking reduces risk. Configuration options should be shareable and synchronizable to increase security. The following configurations could be distributed to users who take part:
Firefox Request Policy
Host file blocking
Application behaviour such as 'disable scripting/macros'
web of trust, trust score for a people you know
cloud based security providers, Site Advisor