>>1216432>You're kind of giving Microsoft a free pass hereI am, because a) TPMs are basic functionality that's just expected on other platforms (iOS, MacOS, Android), and a necessary prerequisite for whole-disk encryption in a usable manner. Without disk encryption, the device is trivially vulnerable to the most basic of offline attacks, and if disk encryption is annoying, people will turn it off.
b) Microsoft's push towards OEMs shipping devices with secure boot (can't get rootkits), UEFI (more reliable firmware updates, harder to put malware in the BUOS), NX BIOS (harder for malware to exploit the BIOS and trick it into overwriting itself), VM sandboxing in the kernel, disk encryption by default, etc. etc. is absolutely a good thing, and genuinely does seem to be coming from a place of wanting Windows to be more on par with Android and iOS.
and c) they're not the people manufacturing the spyware, not the ones making spyware a mandatory requirement to play their game, and not the ones misleading (potentially underage) customers as to what it is and what it does.
By comparison, the worst you can say about Windows 11 is
>Windows 11, once you install spyware on it, has spyware on it 
