There are usecases like SSRF where I want to allow any IP, except for my internal network. They promise they can do that, but they cant.