LittleSnitch resolves DNS queries (i.e. it determines the IP address) before you have clicked ALLOW/DENY; so even if you DENY the host['s IP] connection, your DNS resolver has already seen the query.
Also, LittleSnitch does not block `security.apple.com` queries, which occur before this software has even loaded.
----
>Did you catch LG spying posts?
After last month's GamersNexus exposé, I went back and watched Citizen Four [0]: Ed says it plain and simply in this 2014 documentary, "you don't even need to be a high value target, anything that can listen WILL."
>>"Saying [if you have nothing to hide, then...] is like saying you don't care about free speech because you have nothing to say!" –Edward Snowden
[0] documentary about Snowden revelations; also see his book Permanent Record [1]
[1] <https://www.amazon.com/Permanent-Record-Edward-Snowden/dp/12...>
side note: I worked in data centers during the Snowden leaks, and the cover stories were always incredible ("the tech just doesn't exist to do that yet" is agency legalese, folks)...