I’m currently using a tiny11 modified installation of win11, I had to go through some extra steps to debloat the OS properly, after that it’s more usable. But last month, despite of all my efforts to not have windows update checked and applied, it booted with latest “upates”. With copilot and reinstalled edge as default browser.

Since then I have blocked windows update related on DNS/Router and on device firewall.

Security? It’s just a fancy game console.