I've been saying for several years that, eventually, we will all end up having to put in "default deny" rules for our outgoing traffic, just as we do today for incoming traffic.

(Either that, or hosts will have to be configured without a default route and will need to use a proxy server for all outgoing connections.)

When every piece of hardware and software you use is spying on you, blocking everything by default and only allowing explicitly whitelisted traffic will be your only option to stop it.