Firewall disabled during Config safe and config backup?

[olemr]

I'm on a NG 1100 w/24.03
Have a talkative host attempting to call home every 1s (Dyson fan) which will disable local MQTT access.
Have made a DENY rule for it's IP, but I see if I save any config or make a config backup, traffic seems to slip trough and I lose local broker access (Connection refused).
After a host restart all is fine again.

Is this short outage of the firewall as expected?