Block all accesses to non-local (192.168, 10., etc) IP-based URLs. Will break some legit stuff, but, not that much for most users, and they can just whitelist that as it comes up.
IP whitelists could also be aggregated and shared on github similar to the current DNS blacklists.
IP whitelists could also be aggregated and shared on github similar to the current DNS blacklists.