No so much a bug, more an issue of another default installation setup. After writing an exploit for the winhelp32, I tested on a pc that had Tiny 2 installed. As I expected Tiny stopped the outbound connection.
Testing on a Tiny 3 version had no warnings of the outbound connection. Upon investigation it was found that winhelp32.exe is by default a harmless application and therefore has full access no rules. harmless application? Ever seen one of those?