Snake oil that can be circumvented and defeated just like application control and all the other junk in personal FW solutions.
And if they had a $1,000 corporate FW, it's not the FW's job any Internet network FW's job that's a FW to be protecting individual machines.
And why are you going off the deep end about it?
That is not going to help them either.
What will protect the user is to use common sense, secure or harden O/S to attack, practice safehex and not depend upon snake oil solutions like a crutch thinking everything is okey dokey.
Duane :)