Thanks for this info. I've been patiently waiting for Thread/Matter devices so that I could just use my AppleTV as the TBR and not need any Zigbee gateway. And not need HomeKit-specific devices; just use generic ones.

But I'm certainly not about to let simple IoT devices have any internet access at all. Being unable to block this on the TBR as you suggested would be mandatory for me, and not possible on AppleTV.