Allright! I imagined I would get better performance if I could get the filter to not capture the packets/flows at all. I might do some tests later, for the time being I'll just quickly return an allow verdict at the top of the handler. Thanks!

Disregard this post

I've been able to get the same behavior in macOS Big Sur 11.2