Thanks. I think some apps do need to connect to Microsoft to deliver services like update and antivirus.

Some are used by the products itself to maintain reliability like maps and store.

Others are diagnostics, which can still be manually turned off.

Not sure why one would maintain a dedicated hosts file to block endpoints if they can simply configure this on app level itself.