The issue is really that the front end experience has gone to shit and that windows boxes are inherently zero day hackable at random. With gaming there's memory leaks out the ass. When doing updates windows regularly ignores and resets settings. Not everyone wants to use defaults and not everyone has time to edit group policy settings every time there's a changes. Your IT team is definitely 100% debloating your system before imaging.
I'm over here coding, running vms, setting up ssh tunnels, streaming, recording video, playing music, doing teleconferencing and all manner of other nonsense. So yes my standards are a little out there.
But frankly I don't think windows should be able to be HIPAA certified because I don't believe it's possible to secure it. And trust me that's my job.
The workers at my job that use Chromebooks are by far the most secure in our entire IT stack.