Looking at Windows 10's firewall settings, I see dozens of authorized applications, for most of which I can't find a good reason to allow incoming traffic.
For example, I don't want Xbox, Twitter, MSN, Microsoft Edge to receive unknown traffic from the Internet.
I assume that these settings don't include traffic on already established connections (like the ESTABLISHED and RELATED states in Linux's netfilter). Indeed, I disallowed Microsoft Edge in the firewall and I still can browse.
Why does Windows allow so much applications in the firewall by default? Isn't this a security risk (for example, any of these apps could be exploited)? Is it safe to disable them all and block all incoming traffic?
EDIT : to be clear, I am only talking about inbound connections that happen without having been previously established by an outbound request. I'm totally fine with allowing all outbound connections, as these are initiated by my software.