Some Apple apps bypass some network extensions and VPN Apps. Maps for example can directly access the internet bypassing any NEFilterDataProvider or NEAppProxyProviders you have running
I understand why Apple would want its apps to access the internet unencumbered by potential nefarious network filters installed on a system, but at the same time it's my computer. And that decision should me left up to me. More and more I think my next computer should be Thinkpad running Debian.