With mullvad, proton or iVPN, just enable lockdown mode or what proton calls the “permanent” kill switch.
That should block all unprotected traffic with no issue
Edit, I used policy plus to delay my quality updates by 30 days and my feature updates by 365 days and a couple of days ago I paused my windows updates because I saw britec09 talking about how some of the more recent updates to windows 11 will cause bluescreens sometimes. So I’m not affected.