Yes or by third party firewall. You can not block these processes from outbound access, at least not fully. That's why I always monitor svchost.exe for suspicious outbound connections. I do block explorer.exe from outbound access, for some reason it does sometimes try to connect out. Monitoring the browser is a lot harder of course, because you can't know which connections are legit or not. The only thing you can do is install anti-tracking extensions, but that does not stop the browser and extensions from spying on you. So it comes down to trust.