SSH Port blocked on new 5.21 image

I just found out that ssh access is not possible when setting up a robot with the new 5.21 image. I had to deactivate the port blocking first to make the ssh service available. shouldn’t incoming traffic on ports of enabled services automatically get ACCEPTED? it makes no sense to activate ssh service when the port gets blocked anyway. And it is very confusing.