This isn’t really true. The entitlement is to stop malicious apps from listening to all of the mDNS beacons coming from devices on your network. It doesn’t stop you listening for/advertising specific named services using the NetService API, and it doesn’t stop you from sending/receiving unicast traffic using regular sockets.