I think all firewall are bad and intrusive. What most do? Block by default and then you have users who don't know why some programs don't work. Others will popup a dialog asking for Yes/No to authorise a program to access the Internet, and most people will click Yes, not even waiting a second to consider what are the consequences of their actions.

The best thing to do is to keep the system clean.