You can now build macOS firewalls/network tools via Endpoint Security …no Network Extension needed! In this post, we reverse macOS 26.4’s new ES_EVENT_TYPE_RESERVED_* ES events shows some are network auth/notify hooks.