Basically yeah, look on reddit for tutorials on how to strip the cruft out of windows, and start with W10 LTSB rather than retail. Handling the comms blockade is best done on the edge and not the OS itself imo. Disabling windows update permanently is so beautiful, I love having a computer I can expect to work exactly the same way tomorrow as it did today. It's an incredible QoL improvement.