I understand why Apple would want its apps to access the internet unencumbered by potential nefarious network filters installed on a system, but at the same time it’s my computer. And that decision should me left up to me. More and more I think my next computer should be Thinkpad running Debian.
Some Apple apps bypass some network extensions and VPN Apps. Maps for example can directly access the internet bypassing any NEFilterDataProvider or NEAppProxyProviders you have running