You misinterpret.

You should be able to restrict apps from any network access, not just local. Like contacting graph.facebook.com

put another way: Little Snitch for iOS.