Comment by reanimus

I'm not sure what you're saying here. I'm mainly pointing out that the UI toggles being counterintuitive doesn't change the semantics -- blocking all incoming connections blocks built-in and signed software from receiving connections too.