Cannot add per app rules in firewall and no inbound control

The per app rules in Rethink have no add button to add an app or port or IP.

Moreover there is no option to block incoming connections (e.g. wifi ADB, ssh into Termux, web interface if the phone runs a web server) when in a public wifi hotspot. This is a nasty security leak of Android.