SophiApp VS Windows11_Hardening

Another (more graphical and customizable) way to debloat your windows is with SophiApp. Which is my preferred way on new installs

this one is open-source https://github.com/Sophia-Community/SophiApp

Besides, the Chris Titus Tech's Windows Utility generally eats up too much daylight as the questions and confusion starts rolling in. SophiApp on the other hand, has simplified things quite a bit, as long as we explain what to do and what not to do.

since Ghost Spectre is optimized by itself and the crapware is mostly cut out of it, do 3rd party Windows optimizers/tweakers like SophiApp or ChrisTitusTech make sense at all, or they are already redundant?

We could even perhaps instead create a script or software that strips the official Windows 11 ISO and allows users to choose which apps and features they want to keep or remove. I know there are scripts that exists already like SophiApp or Chris Titus's Debloat Tool but none specifically tweaked for the SteamDeck.

links for lazy: https://github.com/Sophia-Community/SophiApp

A collection about Windows 11 security https://github.com/beerisgood/Windows11_Hardening

If you lack any real technical know-how, then look into the basics for securing your primarily used computer. You have a ton of options like proper internet security through ESET. Glasswire is one of my new favorites. There's hardening guides for Windows too.

This covers quite a lot here.

For a first look into Windows hardening, take a look at https://github.com/beerisgood/Windows11_Hardening . Good luck finding similar security features in Linux. Also recommended reading https://madaidans-insecurities.github.io/linux.html.

I was reading in this post that 7-zip is actually less secure option for compression.

That being said, with the right Windows edition and settings, you can make Windows quite private. Use Windows 11 Enterprise or Education. You can either buy a subscription for it or use an activator like "Massgravel". Be aware that the latter is illegal in most countries, but Microsoft hasn't cared so far. On both editions you can fully deactivate telemetry. Use group policy to do so. Also take care of Cortana. Think about hardening Windows for better security.

Here's a good starting point for the average user: https://github.com/beerisgood/Windows11_Hardening

MS Defender and proper configuration of Windows should be enough.