http://cypherpunk-handbook.i2p/articles/openbsd.html
The Windows firewall is presented here as weak for advanced
control: users have limited direct control, and most behavior is
managed through a GUI that can feel restrictive. Even so, it can
still block malware and other traffic. The macOS firewall is rated very positively in this section:
safe, simple, and user-controlled. It is based on OpenBSD's pf .