Corporate spyware is pretty nasty, regardless of platform. When I was at FB, they had something that forced a kernel module that was incompatible with the next big OS release; and I had accidentally disabled the FB spyware scripts. I set /etc/hosts to immutable because I was tired of them fucking with it ... didn't realize that's why things were better for the next 3 months, until I did the major update and I had to fix things from safe mode ... where everything only barely works.

Microsoft also puts a lot of crap into a default install that you may want to disable. Windows 11 with some judicious policy editor settings isn't so awful.