[amatix]

TripMode (https://tripmode.ch/) for filtering application Internet access when you're running on mobile data uses a kernel extension.

[Dokterdok]

The latest version of TripMode does not use a Kernel Extension anymore, it uses a Network Extension. Still, user consent is asked by macOS to install it.