like the fact that Windows file sharing will now only work on local subnets by default

This is a good idea on paper, and it should have been that way all along from the beginning. But it suffers from the following problem:

Most of Windows' security problems have nothing to do with file sharing.