Is there a kernel extension involved ? What about blocking process e.g. from the terminal etc.
Currently, it doesn't block non-app-bundle processes. The main reason for the app's existence is to block nosy apps that discreetly contact their home servers. I can't think of many (or any) terminal apps that do the same thing.
Also, as I've lately been an embedded software guy, I saw no harm or fear in a little kernel code.