With Custom Ruleset you can make rules exactly as you would like them. Once you made the rules for your browsers CIS will follow those. There is not influence on performance only on the level of security that you seek.
In safe mode, trusted app can access internet even if you haven’t created a specific rule for them.
In custom ruleset mode, only apps with a specific rule can access internet, even if they are trusted apps.