it used to be that a macos would continue to work right if you blocked configuration.apple.com (apple's remote feature flags api, as far as i can tell). now if you block that, you won't even see the current software updates available on m1.