Sincerely, I had understanded the concept as a totally isolated zone.
Where all rules must be specificaly open or to be set up.
And nothing in this zone has a preset rules to access internet ( the green has this)
But it's a zone, like a green or blue or whatelse colored zone.
the way you explain...It seem only a CIDR subnet...