Hacker News Reader

Consider perhaps Windows firewall. I believe it can be configured to block connection by opening program.

Perhaps bots are more easily discernible from a human user who's using a real browser. If the goal is to be stealthy, then they'd want to appear as human-like as possible.

Windows has very sophisticated firewalling and network access can be filtered on a per-process, per-network basis.

Restrictive companies will only allow pre-approved applications, for specific ports, like I.E. doing HTTP/S over ports 80 and 443, and only on approved/trusted networks.

Yeah, realized the folly in my logic -- see my edit on my top-level comment. This strategy is pretty much how LS works on macOS as well.