I think that GUIs are a huge pain. I prefer config files. Also, Little Snitch is not portable across platforms. Mac-only.

Most firewalls are set up as whitelists for incoming connections. Similarly, I set up DNS and HTTP "firewalls" as whitelists for outgoing connections. Zonefiles define the RRs that applications are able to query and lists/maps/tables define the hostnames/URLs that are accepted by the proxy.

I’d be divorced in short order if my family had to constantly ask me to add sites to the whitelist.

I can’t see this being workable for the vast majority of people.

You could probably put each person on their own vlan and let them manage their own lists.

It might postpone the divorce by about 5 minutes while you try to explain it.

I don't understand why you would use MacOs if you care about privacy. Why do you use it? (Just to be clear, this isn't "boo macos sucks", I'm genuinely curious why so many people use it (especially in it inclined communities))