From what I remember, when you say "block all connections by this program" on the relevant files it doesn't just use the filename, it tracks the exact version of the file, and as soon as windows update touches it your firewall block stops working.

So a whitelist method works, good, but I think it's fair to said that specifically blocking telemetry is extremely difficult with the way blacklisting works.