I admittedly don't understand how low-level the packetfilter/pf firewall is on macOS and need to audit if it's enabled. AFAIK there's no table for that, nor is it something I can see a running process for, so I most likely have to shell out to pfctl, yes?