A hardware firewall can't do per-process blocking. That's the whole point of Little Snitch. Besides, I wasn't soliciting advice, I was offering criticism. For

A hardware firewall can't do per-process blocking. That's the whole point of Little Snitch. Besides, I wasn't soliciting advice, I was offering criticism. For some reason, a lot of people always confuse those two. Don't say "You cannot trust the security framework" if you really mean that the security framework should be exempt from criticism. And if you don't mean that, then the hardware firewall is a red herring. It's a red herring anyway, because it's not suitable for the use case.