Improve Privacy and Update Control

[tartaruslovesnoodles]

I like what you're trying to achieve with your repo here, streamlining privacy. But I noticed a few issues regarding some sections. They are a little incomplete as presented in my opinion.

These features listed below would remedy the shortcomings/close things together. I'm going to program these tomorrow or the day following. I'll go ahead and make a fork + PR when I do.

Disable Windows Update Sub-features:

• This can be done to a much more effective degree: changing the download servers, bypassing the idle check (prevent afk updates), send a looping command to disable the update service on while true, and customize shutdown to disable all network adapters (of course, also then enabling them then AT LOGIN not startup).
• In regards to disabling adapters, it isn't controllable, but if users use ethernet and don't have Wi-Fi functionality, they can simply unplug their ethernet before turning off the device and don't plug it in until you get to login NOT startup or before.

I will concede that my pitch here is not the most elegant way of doing it, probably, but with your current option sets, you really aren't approaching the full opportunity you could be for disabling Windows updates. You essentially just have a new GUI layer for windows update settings. You kind of have to battle the OS with updates even though it sucks if you actually want any meaningful change, no offense.

Privacy:

• Run windows through tor node proxy
  -not always applicable, worth including though since you do checklist services not broadly applied configs/profiles
• Disabling Wi-Fi
  • Microsoft tracks IEEE 802.11 which passively scans when you have Wi-Fi enabled, they can use BSSIDs/MAC of your connection and neighbors to deduce your location.
  • The risk of Microsoft having your general location isn't huge, but it does kind of nullify or cancel out all the work you're doing to prevent location tracking. You can test this by enabling location services after trying to harden your setup, then using Microsoft edge. Then create or utilize a website that asks for location and returns the value to your browser. You'll notice if you don't disable Wi-Fi, they can find your location. They can even follow it through a VM...I'm not sure on a technical angle how they're able to do this...actually, but I guess it is expected Microsoft would transcend even my wildest imagination for privacy invasion.
  • Adding to this, you can create a windows 10/11 vm and send traffic through a vbox host-only adapter, on a physical windows 11 machine with location tracking turned off, BUT turning on location on the VM of that device that has location tracking turned off, can also find your location (if you don't disable WI-FI on host machine). Interesting, isn't it?

I suppose discussing a pull request instead of just making it is redundant, since I could've just said this in a few days after I code, but this can confirm/be a quick filter if my patches are in line with this tool, or if the goals are different than what I'm suggesting.