Thanks for the info, I definitely have to consider an alternative like that in the future.
For the time being I tend to just enable 1 domain at a time temporarily and see if shit works, if it doesn't, disable it again. It works ok, as I've gotten used to seeing a specific few domains or commonalities between the payment type ones. But yeah probably similar to you I keep very few things allowed by default globally and have even begun reducing them lately.

If it's a really big hassle atm I'll revert to chrome (didn't have to yet) since those fuckers already have my card details anyway, but luckily I don't really do all that much shopping online so not a huge issue....the most common thing I do is top up my travel card for local transport and I use it like once a month, so that probably tells you a lot.