I have the same issue. Truenas itself and Apps work fine, no deck. Checked access to api.hexos.com from shell, its reachable via IPv4 (no v6 at my place)
Add:
VPN egress per app (like gluetun), to only allow outgoing connections via VPN interface (for ensure that Linux ISO downloads are only via secure connections)