For my private PC, I simply would not trust Microsoft.
Look for something like Win 10 LTSC. It’s entirely stripped down, and usually not readily available to consumers. The updates are only security and stability, no feature.
Alternately, you can try using Linux, but my experiments with Tails are that it’s a challenge and that there’s no documentation to speak of.
Alternately, you can try using Linux, but my experiments with Tails are that it’s a challenge and that there’s no documentation to speak of.
Well, Tails isn’t exactly a “daily driver” Linux distro so documentation will be lacking compared to the alternatives. Something along the lines of Pop OS, Mint, or Ubuntu would be better for most people.
The encryption can be used for bad things too. Windows 11 itself has so many things just straight up bad. Spyware, Telemetry and instability of some “older” apps aka apps from windows 10.
Not everybody thinks they need such security because it’s their home computer.
Enabling device encryption necessitates the backup of the encryption key (and backup of the data files); otherwise, you may lose all the contents when things go wrong (like the key disappears after an update). People who don’t understand the tech may not know where their backup keys are.
Windows Home encryption is a hassle since you don’t have finer-grain control over the encryption, unlike Bitlocker on Windows Pro. This is the lamest scheme for Windows. You only get practical basic security with Windows Pro.
Enabling system drive encryption may make your system backup/recovery harder or impossible in some configurations. Figuring this out may require some technical expertise.
The search for “security” is just started. Whether is makes sense or not i let you choose. Your point stands, but laptops have usually “unlocked” boootloaders and so it would not make sense as in a phone.
You need vendor locked in devices to achieve true security (and lose your freedom of course)
(Just a bit more clarification. A truly secure and locked device takes your freedom to modify and really own the device. It would be only a matter of time you will be renting your own device)
One is mobile the other isnt unless its a laptop. Plus I think win 11 now defaults to that and the same with macos afaik but I didnt really do thorough research.
If you’re talking about desktop PCs, we don’t put those in our pockets and carry them literally everywhere and drop them and lose them in random places.