Or the most nefarious, where Apple apps were able to bypass most of the TCP/IP stack tracking and send traffic directly, regardless of any on-device filtering or firewalling, like Little Snitch.
And then they claimed it was only "a temporary measure while they dealt with updating software", but they never did explain why an app like TextEdit would have ever needed a kernel network extension in the first place.
That to me was almost certainly a post-facto attempt at justification when they were caught with their hand in the cookie jar.
