Care to elaborate? Afaik and tested w10 does NOT bypass its own firewall when set to 'drop all' traffic.

From what I've seen "drop all" works at the moment but directly blocking the telemetry programs keeps getting undone whenever the file changes and it intentionally doesn't use the hosts file.

Dont know what you mean by undone, but running firewall in drop all + whitelisting works fine and block all telemetry (one caveat : dnscache needs to be disabled to remove possibility of dns tunneling)

From what I remember, when you say "block all connections by this program" on the relevant files it doesn't just use the filename, it tracks the exact version of the file, and as soon as windows update touches it your firewall block stops working.

So a whitelist method works, good, but I think it's fair to said that specifically blocking telemetry is extremely difficult with the way blacklisting works.