In the Vault 7 leaks, Little Snitch was mentioned as something three letter people had problems with circumventing. I think it's worth considering whether this new attack surface is there by design:
https://www.reuters.com/article/us-apple-fbi-icloud-exclusiv...
(I hate the term “all but”. I find it often hard to tell what people actually want to say when using it.)