What should we require of VPN providers on macOS?

[jonah (Jonah Aragon)]

I do think it still remains a valid question here whether we should say VPN clients should always use PF on macOS, even if Apple isn’t going to remove PF. Especially because, as you also note…

@privacycarrot

I also believe macOS apps can’t manage the firewall from within a sandbox, so an app which relies on it can’t be distributed on the Mac App Store.

…such a requirement would mean we could never recommend a VPN distributed on the App Store. I’m not sure that makes sense for us.