Probably referring to https://www.obdev.at/blog/a-hole-in-the-wall - as of 2020

> As it turned out, this behavior is on purpose. There’s an explicit whitelist that allows certain macOS services to bypass any third party firewalls and to communicate on the Internet without being even noticed by the user. A hole in the wall.

Was remediated later, but shows there is precedent.