This is potentially a security concern as all traffic will be routed inside the OpenVPN daemon internally. We should route everything through the main firewall engine so that people can create firewall rules from one client to another one.
Additionally, we need to remove "client-to-client" as this is the same behaviour.