I still use a non-Microsoft firewall to have an out-bound alert pop up whenever anything tries to go online. Then I can easily make a rule to allow if I agree with it. This used to be a more common approach to privacy and security. It is fun seeing how many programs insist on being "always on" and phoning home now that people don't pay as much attention as they used to. It is unfortunate that many of the great firewall software companies have closed.
1) There are some front end programs that give better features and an improved UI to the built-in Windows Firewall. Which ones are people still using?
2) Would the built-in MS firewall be able to block MS itself if configured correctly, say for updates or telemetry?