Firewalls don't do this because they are built at the wrong layer to do proper pending calls. It's too narrow of a design space for most firewalls to care.

True, most firewalls aren't built to pause for user input. But then again, that's why almost no firewall software is suitable for this user experience.