This kind of cynicism is tiresome. The test case involves pinging Mullvad, not Apple. If Apple wanted no filtering to be possible, they would simply remove pf entirely.