Nah, they require programs to use their api, and then whitelist their own programs from the api. you can use the following in the terminal the see the list of

Nah, they require programs to use their api, and then whitelist their own programs from the api. you can use the following in the terminal the see the list of whitelisted programs: cat /System/Library/Frameworks/NetworkExtension.framework/Versions/A/Resources/Info.plist