I'm in the same boat, have to use Windows at work. In addition to whatver MS is doing, every workstation is encumbered with various EDR and antivirus software.