Yes I don’t see a good way right now without ContentCollection.
I also thought a bit about having the idea of Constraint as a core concept and including a supertype for it.
But it feels more like a workaround. Inversing the mentioned condition and assuming that every package moves to whitelisting could also simply solve the problem. But we need test cases and real world examples to see which way is the best for the next years to come.