Looks like the core of this is done via https://developer.apple.com/documentation/networkextension

some cool stuff here:

- Content Filter Providers: https://developer.apple.com/documentation/networkextension/c...

- DNS Proxy Provider: https://developer.apple.com/documentation/networkextension/d...