Maybe in an hardening solution for OS, with security baseline and an IDS/IPS can understand better the connections are established, you can understand and identify patterns and block.
Don't be mistaken into thinking that the problem is only with Microsoft (this goes to another level of course), this has been happening for many years in various technologies, and they say it's to improve their products through user experience.