block all incoming connections turns off

Every time I turn on 'block all incoming connections' in my mac's firewall, it turns back off as soon as I close the settings. There are two processes there that I simply can't block from accepting incoming connections: com.google.Chrome and com.google.Chrome.helper.

I have deleted everything related to google (&chrome) on my computer, but there are still a few files I can't access, buried under /system/library/private frameworks/internet accounts. I have tried everything to delete them, including temporarily disabling system integrity and trying to delete them using sudo from the root account, but I just don't have permission.

I'm starting to be a bit paranoid and feel like I'm the victim of a targeted attack. I ran a third party firewall and some some TCP connections to an IP hosted by googleusercontent. I have lockdown mode enabled at the moment, but the firewall is clearly allowing incoming connections still.

I'm not sure what I could do, short of a full erase of my mac (but then again, restoring a time machine backup would probably include the problem).

Any kind of help is appreciated. I'm running ventura 13.2 on an M1 air.