orca VS oh-my-posh2

Look into running an ORCA report and see what it flags: https://github.com/cammurray/orca

I highly recommend reviewing this if you haven't already: https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/email-protection-basics-in-microsoft-365-spoof-and-impersonation/ba-p/3562938. If you have all of the Impersonation features enabled, you can greatly reduce the risk of future impersonation emails getting through. You can quickly run the ORCA or the Configuration Analyzer tool in Defender to see if you're behind on best practices. I've seen this work very well in orgs that were previously big red targets for BEC.

If you are going to use it, I highly recommend utilizing Cam Murray's ORCA Module to review your settings against Microsoft's recommended settings (assuming you have appropriate coverage to manage and are not expecting it to be a set it/forget it solution.)

Use ORCA. https://github.com/cammurray/orca

I like PowerShell for the fact that it has a C# interpreter/runtime (you can import classes and functions from a C# DLL and write some yourself with PowerShell). My first open source contribution was also on a PowerShell theming module so I'll never forget it (for better or for worse).

It means, that you can use a terminal with any shell underneath. So, Windows Terminal can be used with PowerShell, Bash, CMD, ... whatever you fancy. Colorful prompts and outputs are entirely possible with PowerShell, if you use a decent terminal emulator. Or you use a decent terminal emulator with any other shell.