Usually this scheme works well, but the problem is these rules aren't always removed, cluttering the list and maybe leading to unpredictable network issues later. Typically this is just to ensure they always get access to the outside world, but occasionally they'll also use the firewall to control particular types of traffic. Some VPNs add custom rules to the Windows firewall.
