It seems that automatic detection of private networks still buggy (on a clean, new install)!?
Detection enabled (as default), but the expected popup not displayed (so global rules not created automatically, e.g. SMB traffic alerted as “from the Internet”) and the network still shown trusted in manage networks.
[attachment deleted by admin]