intel-undervolt VS WindowsSpyBlocker

10th gen is locked by "Overclocking lock" And "Cfg lock" in bios, you can disable it thru ifr and use any software to undervolt your cpu (throttlestop on windows, linux has its own software (this, probably)). This is a lot safer than just putting voltages in bios as you can guess.

On Windows machines and laptops with Intel cpus, I almost always use Throttlestop to tweak power consumption and thus temperatures. I'd like to do so on this machine as well. I've found this: https://github.com/kitsunyan/intel-undervolt

intel-undervolt - though I may not be using this optimally. CPU: -75, GPU: -50, CPU-Cache: -75

You can use intel-undervolt to modify the voltage, TDP.

I will try your suggestion about limiting power package. I've been using this 3rd party intel-undervolt software, which I'm not sure if it supports granular changes to wattage, but it seems like there is some energy/performance settings there.

I personally use intel-undervolt and auto-cpufreq.

You can also undervolt though software on Linux based OS's. For intel there's these: https://github.com/georgewhewell/undervolt (this one looks more popular) https://github.com/kitsunyan/intel-undervolt (this is the one I use, no particular reason)

intel-undervolt also works fine for Intel laptops (I've used this successfully with my 11th gen H laptop).

Windows Spy Blocker = This will add a bunch of Windows IP addresses to your Windows Firewall. The basic settings should not impede functionality. It should also allow you to switch ntp (how Windows sets it's Clock) to more open alternatives.

Telemetry is similar to Windows 10. However, you can stop most or all of this with the hosts file or a Pihole. Add this: https://github.com/crazy-max/WindowsSpyBlocker/tree/master/data/hosts

You can use WindowsSpyBlocker on Windows to change the NCSI, or you can change it yourself

Also, the New Oil recommends WindowsSpyBlocker so that may be another option for you.