Seriously if you're genuine about that it's such a temporary solution. You're saying you can't trust your operating system vendor at all. Start making plans to dump them is really the only sane thing to do at that point.
I use Linux for most things and only boot into Windows for games. Wintendo is a real thing.
I'd like to be able to play the games I want to without worrying about being frog-marched into an OS without a taskbar.
At this point I would settle for a deny-then-allow solution involving dropping any and every packet that's not from the servers of the small handful of online games I play, any well-known wikis that cover the games I play, or any relevant modding sites.
> I use Linux for most things and only boot into Windows for games. Wintendo is a real thing.
> I'd like to be able to play the games I want to without worrying about being frog-marched into an OS without a taskbar.
Lutris/Steam with Proton works wonderfully nowaday!
The main caveat is if you enjoy multiplayer gaming, it often require extensive low-level access to your Windows environment for anti-cheating purposes. Wintendo is the correct approach in that case; VFIO is an option, but afaik some anti-cheat systems will detect that they're running inside a VM.
Most security concerns go out of the window (pun not intended) when the most sensitive information your OS has access to is your Steam account, which has 2FA against a separate non-Windows device.
Since my PC is on wifi, what I do is set my wifi as a metered connection. Windows won't download updates on metered connections. I have to trigger the updates manually, which allows me to review them first. Like how it used to be.
Nifty trick, thanks for sharing. Will be useful to many readers. Including those booting into W10 1% of the time, for SD-Card formatters and other Windows exclusives.
From https://www.pcworld.com/article/3623008/windows-11-faq-featu... rather than the horses mouth but I expect it is correct.
I'm glad I'm on unsupported hardware.