Several times a year I get a phone call at 6:30AM from her asking to quickly drive to her house before her shift starts at 7 to fix her computer, because "something happened" or "I was hacked". Every time, it's been an update which has reset her default apps so email opens in the newish Mail app and not Outlook or Gmail-in-Chrome, or changes the browser to Edge from Chrome. I'm not a systems administrator, so I havent a clue on what the magical incantations of registry paths and values should be which prevent this despite trying.
Obviously if this was a domain managed asset at a company, someone would know how to prevent this. As a "home device", it feels like you're automatically enrolled in the "Global Microsoft domain", and subject to the whims of a product manager making IT decisions.