That is very interesting. I did not know that, where is it documented?
This might be interesting here as well: QubesOS Firewall Management + Any Problem with sys-usb, sys-firewall, sys-net Being Disposable?
Can you please check and comment on this?