When I was using Windows Firewall Control 10 (Sphinx) and Windscribe VPN, I would see Windscribe was trying to use QUIC UDP-443, Sphinx has the option of blocking QUIC in-out. Also of course, has the option regular TCP-UPD.
Windscribe VPN did not like it at first but after a couple re-starts it was normal. Gave me a more secure feeling.
QUIC can do pretty much what it wants to do behind the firewalls back since it is not recognized.
I do like the option, wish ESET had it.