Did not experience this on the firewalled subnet. But I did with direct subnet to Internet.

(Closer examination of default-deny firewall shows that HTTP3 are being blocked due to custom UDP connection tracking.)

I’m fine with that.