I installed Windows on a device yesterday. I had to switch to the command prompt and type in "OOBE\BYPASSNRO" in order to just not connect it to the internet and skip the Microsoft sign in prompt. And that seems to work for the most part. Sending diagnostic data is still required and not optional but ah well.

A few days ago on another friend's setup, he didn't know that this option existed (who does really), so he signed up for a Microsoft account, logged in and his Documents and other folders were automatically getting synced to OneDrive. Now, for you and me, we understand that just uninstalling OneDrive should fix that or even just disable that feature itself. But this is opt-out and not opt-in. And he doesn't really understand it's getting synced, he simply sees that there's oddly increased data usage. This is the kind of person who will have recall enabled without ever realising it exists or even using it, but will still have it as a potential security issue waiting to happen on his setup.

It's all the opt-ins that Microsoft does. Everything defaults to "yes, do that worst thing possible". And you and me will probably switch it off, but we're not the average person. The average person doesn't understand or care.

But god forbid someone ever has to open a Linux terminal.