On the plus side they avoided breaking everybody’s firewall configs by importing the “new” pf rule syntax from OpenBSD.