How do people handle applying firewall rules to Scoop apps?

[Gitoffthelawn]

There are 3 possible fully qualified pathnames to specify an app installed via Scoop:

1. C:\Users\username\scoop\shims\appname.exe
2. C:\Users\username\scoop\apps\appname\current\appname.exe
3. C:\Users\username\scoop\apps\appname\version_number\appname.exe

In Windows 11 (and likely earlier versions of Windows too), Windows Firewall rules only function properly with the last one (number 3). But that's a big problem because every time Scoop updates an app, that pathname becomes invalid. Thus the firewall rule becomes invalid, and network traffic is either inappropriately allowed or blocked.

How are people handling this conundrum?