When the name of a address-/domain-/network-/etc. group is changed, all firewall rules that have references to this group need to be manually changed. This can be very inconvenient with large rulesets. It would be nice if references in firewall rules would be changed as well.