I am sure someone will find a way to exfiltrate data using any ICMP type. How good are firewalls at validating the packets are legit?