it's not more work when trying to stop exfiltration or espionage because telemetry doesn't get sent to random places. Microsoft publish the hostnames that rece

it's not more work when trying to stop exfiltration or espionage because telemetry doesn't get sent to random places. Microsoft publish the hostnames that receive telemetry. block them and you block telemetry from being sent. it still gets collected locally though. the performance argument is solid and I will see if I can measure that before I agree with you. from what I've read, at least among the common telemetry systems I know of (Azure Application Insights, OpenTelemetry, and Microsoft's system built into the OS), telemetry is gathered for a bit then sent in a batch, which would indicate that performance is at least a consideration.