• Enhance firewall UID handling by exempting system-critical and VPN apps from blocking to prevent shared UID vulnerabilities