The correct way to do network security in any OS is to block every programs from connect to internet unless explicitly allow by users. It should also notify us

The correct way to do network security in any OS is to block every programs from connect to internet unless explicitly allow by users. It should also notify user a new/unknown program is attempted to connect to internet and allow user option to allow/block. Not the way it does now where every programs are allowed by default. However, that will be in conflict with the new biz model of win10 which is convert itself into a big Ad machine like Google/Android. BTW, in my win10 configuration, I only allow Firefox, Chrome and Window Defender to connect to internet with Window Firewall. It works well, stable, reasonably fast and long uptime. Best of all : No more force update from Windows.