On the upside, the endpoints are nicely documented by both MS and independent researchers. Also, Windows enforces packet filtering rules on it's own phoning home so a well configured firewall like SimpleWall will be relatively secure from a spying perspective.

https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Cyber-Si...

https://www.henrypp.org/product/simplewall