Not exactly my wheelhouse either, but what I'm pretty sure is happening is that it's blocking things at the level of what IP addresses are trying to interact with my device at all. If I tell it not to interact with my browsers, then nothing my web browsers do or connect to will get protected by the firewall and I still want that protection. It's better than the standard windows firewall and has caught some actual nasty things before. I do also use in-browser protection like uBlock Origin, uMatrix, etc. But yes if I'm being a dork which is very possible and anyone else wants to chime in, I'm all ears. I don't mean to derail the thread either though.