Is there a way on a 2820 to block all websites other than those listed as 'safe'?

Or do I just want life to be too easy?

yeah, you'd need to set up the white list in the URL filter for that. In the URL content filter, make a profile with the Priority setting of Both Pass and then only the URLs you add in there will be allowed.