Which statement about implied VPC firewall rules in Google Cloud is correct?

Implied firewall rules are a fundamental security component of every Google Cloud VPC network, whether it's a default or custom network. These rules are automatically created and cannot be deleted, ensuring a baseline level of connectivity and security. Specifically, they allow all egress traffic (from instances to anywhere) and deny all ingress traffic (from anywhere to instances), with an exception for allowing ICMP, SSH, and RDP from specific IP ranges for the default network. They cannot be modified; any changes to network traffic behavior must be implemented through user-defined firewall rules. Implied rules are evaluated after all user-defined firewall rules, meaning user-defined rules take precedence.