PF firewall on macOS: writing a tiny pf.conf to block outbound traffic from one specific app and ignore everything else

You installed a beta of some app. It’s slow, the UI’s weird, and Activity Monitor shows it making outbound network calls every two seconds — telemetry probably, or analytics, or who-knows-what. You’d uninstall it but you actually need the app …