There is "freeze coin" feature in Electrum. And you can do a similar thing in Bitcoin Core. For example:
Yes, that's actually exactly the opposite of what I'm proposing: you manually blacklist coins instead of whitelisting them. If you know about Bitcoin the freeze coin feature is quite cool, but you already must suspect an UTXO is part of an attack, so I think the whitelist method is "safer" for non-technical Bitcoiners.
In reality, all what Electrum devs would need to change is (if this feature is activated) to freeze all incoming coins automatically until they're whitelisted or come from a whitelisted address.
Few thoughts,
1. With HD wallet, the same sender may send Bitcoin from different address.
2. What would happen if the TX contain multiple input from multiple address?
On side note, i also have concern some users would be confused that they can't send all of their Bitcoin or Bitcoin they recently received.