Windows 10, version 1909 delivery options

My Thinkpad with CPU 7e generation come with Windows 10 Professionnal. I updated to Windows 10 1909. I checked some sections, Windows Defender Firewall with Advanced Security (wf.msc / firewall.cpl) where each rule is allow by default, list of groups policy (gpedit.exe), Windows As Services (servives.msc), applications natives where some need use the network, tasks schedulers, ... I am a beginnner about the big question of security. How to manage easily the complex system Windows to finding the balance between real security, privacy, contributing to artificial intelligence through good telemetry, performance to limit the use of system resources? When we use a personnal computer, Windows comes with a tool that notify all network IN and OUT of the system to be sure it's safe activity. I see Windows As Forest where many way as possible to go inside ... Thanks