i've increasingly been having issues with hands off![0] on my machine (intermittent high cpu usage, regular kernel panics), and was actually looking at this guide a while back to decide whether i should switch to pf instead[1].

but pf seems to require much more configuration and management. anyone have experience/pointers in this regard?

[0] i used to use little snitch many years ago, but ran into similar issues with it over time (maybe it's better now).

[1] https://github.com/drduh/macOS-Security-and-Privacy-Guide#ke...