I think this entitlement controls only the ability if you are not running as root. That makes perfect sense, because you don't want random user processes to be able to sniff your network traffic...

> A Boolean that indicates whether the app manages virtual network interfaces without escalating privileges to the root user.

https://developer.apple.com/documentation/bundleresources/en...