debotnet VS Windows11_Hardening

Run Debotnet - https://github.com/builtbybel/debotnet - It has some very useful scripts for disabling telemetry services and scheduled tasks. I install Windows LTSC, so it doesn't have any bloatware, but would use Debotnet to remove bloatware if I ever have to install Home/Pro versions.

Try one of these : Debotnet - DisableWinTracking - Debloat-Windows-10 - Privatezilla

A collection about Windows 11 security https://github.com/beerisgood/Windows11_Hardening

If you lack any real technical know-how, then look into the basics for securing your primarily used computer. You have a ton of options like proper internet security through ESET. Glasswire is one of my new favorites. There's hardening guides for Windows too.

This covers quite a lot here.

For a first look into Windows hardening, take a look at https://github.com/beerisgood/Windows11_Hardening . Good luck finding similar security features in Linux. Also recommended reading https://madaidans-insecurities.github.io/linux.html.

I was reading in this post that 7-zip is actually less secure option for compression.

That being said, with the right Windows edition and settings, you can make Windows quite private. Use Windows 11 Enterprise or Education. You can either buy a subscription for it or use an activator like "Massgravel". Be aware that the latter is illegal in most countries, but Microsoft hasn't cared so far. On both editions you can fully deactivate telemetry. Use group policy to do so. Also take care of Cortana. Think about hardening Windows for better security.

Here's a good starting point for the average user: https://github.com/beerisgood/Windows11_Hardening

MS Defender and proper configuration of Windows should be enough.