Still, silencing a Mac on the network is way easier than silencing a Win 10 machine. It is not only the telemetry and the visibility into which process does what, but also the control over updates and persistence of your rules. Silent updates that change or misinterpret your settings (firewall rules bound to executable version, then updating this executable and applying default rules instead of yours are definitely not my favorite experience) significantly increase the time and effort needed, compared to other systems.