Apparently blocking outbound port 80 breaks updating for macOS. That doesn’t seem great.