[gib444]

It's so noisy though because of apps' built in update checks and other legitimate things initially, which you then grant a process exception for. Per destination allow rules would also generate a lot of popups. Then the user just grants exceptions for all traffic or suffers alert fatigue

It's useful for apps that should not have any outbound networking

But fundamentally I don't think it moves the needle that much on the bigger picture