As far as I understand, the DEX whitelists are to protect user from approval attack, where malicious DEX contract may steal fund from the allowance that user has approved to the router.
It seems some other DEX routers use a separated ERC20 approval proxy contract to avoid the problem, so they don't need to maintain a whitelist in the router.
Have li.fi considered to use a separated approval proxy contract and remove the whitelists? the whitelists seems to be a significant maintenance burden.