It's actually 3 dimensions, as any selections you make in that UI only apply to the site you're currently visiting.
Well, technically that is only partially true as the third dimension is the (sub-) domain scope or "*" which can be reflected behind the scenes with the first-party settings for the origin's domain for each request type because it has the identical effect.
But if you view the rules, you'll see its three dimensions spelled out:
* * * block
* * script block
* 1st-party * allow
stackexchange.com sstatic.net * allow
stackexchange.com cdn.sstatic.net script allow
This is full [source domain] [target domain] [request type] flexibility. The GUI will only show the stackexchange rules above when you're actually visiting that site; it doesn't mean the third dimension is fake.