Just setup max firewall and let firstboot deal with it. Firstboot will need a TUI interface to remove it from TUI anaconda, btw.
Not going to do in near future.