Point being there is still a firewall in place with a default deny. Nothing fundamentally has changed.

I actually appreciate your diagram because it makes it easy to see. The firewall will not route packets you haven’t expressly opened in both scenarios.