Good question.
Here's my guess. The MX won't block its own cloud connection but I'd expect you to block the Meraki cloud connection to downstream switches and APs that way.
Edit: I just tested it and it is indeed like that. When I have the following block rules, the MX is online, the switch behind the MX is offline and the AP connected to the switch is online.