Host firewalls don't generally do it. Seems AVs can better tolerate the reputation of being invasive and draconian. I suppose it's different if are focused on

Host firewalls don't generally do it. Seems AVs can better tolerate the reputation of being invasive and draconian. I suppose it's different if are focused on trying to win from a starting point of a compromised machine, a kind of Core Wars game. On current systems this can't be reliably recovered from unfortunately, in that situation user should just be alerted to wipe & restore from backups.