Thanks. Can I whitelist the whole internet (by using /0 perhaps?) using this method? I've seen people complaining about this issue on VPNs and such too.

You can whitelist CIDR ranges of /16 and /24 currently. So yes, you can to some extent whitelist everyone.

If I can only to /16s at the largest, I would have to add on the order 65k ranges to accomplish it... not exactly desirable way to spend an afternoon. Even via API I don't think they'd be too happy with me.

I agree, this is not the most efficient way to whitelist everyone, but my point was to outline you can whitelist whoever you want. Hopefully support for wider ranges will be added.

Yes, just add 65536 exceptions!

No need to add 10.0.0.0/8, 127.0.0.0/8, 172.16.0.0/12, and a few others...