They’re trying to stop people from listening for all multicast traffic, presumably because it stops someone from fingerprinting based on the things on your netw

They’re trying to stop people from listening for all multicast traffic, presumably because it stops someone from fingerprinting based on the things on your network. The restriction doesn’t stop you from using the NetService API (or friends) from listening for or advertising specific named mDNS services. You can continue to do that today without any extra entitlements. What it stops you from doing is listening for wildcards and sucking up everything — sadly, restricting multicast traffic on regular IP sockets is basically an extension of that.