If you are concerned with security, you can install postmaster or any other firewall force block all the internet connection and deny all the connections and then manually start allowing apps and process access to internet.

It's an annoying process. It takes a lot of time to set up, but once it gets going, you will be mostly secure from this type of attack.

So, sort of security over convenience.