This is true 😭

Previously, a comprehensive macOS firewall could be implemented via a Network Kernel Extension (kext)

Apple deprecated kexts, giving us Network Extensions….but apparently (many of) their apps / daemons bypass this filtering mechanism.

Are we ok with this!? https://t.co/rYkDnuOgLJ

— patrick wardle (@patrickwardle) October 20, 2020