[m0guz]

I don't trust these tools as any Windows Update can override the setting, or Microsoft can add a new "feature" and continue collecting telemetry data from that. For example; Disk Space Cleanup (cleanmgr.exe) tool has been trying to connect to internet since last year's Windows 20H2 updates. I use Binisoft's Windows Firewall Control (wfc)[0], set level to Moderate and check logs regularly. There is also simplewall tool [1] which has predefined Windows list to block.

[0] binisoft.org/wfc

[1] https://github.com/henrypp/simplewall

[squarefoot]

Agreed. I would use them to avoid ads and annoyances, but Windows, as a closed system, to me remains untrustworthy. I'd never ever use it for banking, communications or store personal data. But if I'm using music software or games, those utilities would make the experience less annoying.

[freeAgent]

You do need to remember to re-run this after any major “feature” update on Windows as Microsoft have a way of “forgetting” settings they don’t like or coming up with new ways to violate users’ privacy. This is definitely not foolproof, but it is one of many tools in the arsenal.