Offline Mode Makes Windows Defender Even Smarter

"It's nothing to do with being connected to the internet. It means that Defender runs before Windows has fully loaded, meaning that it can access and scan your core operating system files which otherwise it would not be able to access."