@timbray
I know of very few cases, anecdotally or statistically, of successful attacks that a consumer end-device firewall would have stopped. It almost always turns out to be malware, phishing, or actively exposing something insecure.
I’d be interested to hear verified counterexamples.