Re: Or... no snooping at all
"it may be worth blocking Win10 from talking to its masters but ... in both VM and "naked" version: you still need it to patch"
You don't need to protect against the big bad internet it doesn't see.
If it's working as you need it to work you don't need to change it (especially if, as in some cases, the patch makes it stop working as you want).
If it's not working as you want you should have installed something else that did in the first place.