The documents are simply not up to date, I hope.
For example, the doc https://developer.apple.com/documentation/networkextension/nefiltermanager very loudly states:
"In product builds for distribution, Network Content Filter configurations can be created only on supervised devices. During development and testing you can temporarily override this restriction by signing your build with the
get-task-allowThat's not true for Macs, right?