Sorry for the delay in replying. Yes, I did try it and it failed without both entitlements. It's not a blocker as the App Store review accepted it anyways, but I just found it a bit odd.

Also this issue is new to macOS Sequoia. Does not repro on macOS Sonoma.

The request is a UDP broadcast sent with sendto. public func sendto(_: Int32, _: UnsafeRawPointer!, _: Int, _: Int32, _: UnsafePointer<sockaddr>!, _: socklen_t) -> Int

Filed the feedback using my work account. FB21250373.