Works here, on the same version as yours, 2.0.4993,
Firewall logging is enabled
Main setting is to Deny selected, meaning it’s a dark looking icon in the WiFI column (the only one I have)
I selected few applications to be blocked, one of them was The Weather Channel. Also tried on browser.
All were blocked, no connection, and the firewall log reflected it.

I think the differences between deny selected and allow selected has to do with workflow for the user, as in how many things you need to click.

Re: “•3D “extended” light grey selector with icon selector is same as “checked” - enabled.
3D “sunken” darker selector with icon and little orange pointer at bottom is same as “unchecked” - disabled.”

what is 3D ?? perhaps we aren’t talking about the same feature