> I still can't figure out how to set Sequoia's firewall to enable logging

You should be doing this level of blocking and detection at the router/gateway, not on the computer itself because your Mac has like 4 different OSes and macOS already has a lot of exceptions when it comes to filtering/logging Apple related communications.

If you don't have a router/gateway where you can set firewall rules and logging already, how much do you really care about this? Because I can guarantee your Mac is far from the worst offender on your network.