Because firewalls are explicitly designed and audited for this kind of exploit. It would be much more surprising for a mature firewall system to allow unauthorized network access, than that this package management system had an exploit that allowed this escalation of privileges.

This isn't rocket science, this is why firewalls exist, to provide this cross cutting layer of defense.