I've put it off for a year but now my Windows 10 installation is downloading 11 seemingly without any way to stop it. There's apparently a way to stop updates by editing the registry but I don't have the WindowsUpdate folder there for some reason.
I also looked into extended security updates for Win 10 but enrolling apparently costs 25 euros. No thanks. I know there are versions of Windows that have security updates until 2032 but I'm pretty sure I'd need to reinstall Windows to make use of those, and if I were willing to redo this installation I'd just go with Linux instead. (Coincidentally, I installed Linux on a small SSD last year and I've been spending a lot of time on it lately instead of Win10. If SSD prices weren't completely fucked I'd get a new big one and make it my main/gaming OS)
I assume I will need to make some kind of decision about this at some point since it's not like Win10 is getting any more secure. Going through with the Win11 "upgrade" is probably the path of least resistance. I'd appreciate any tips to disable forced telemetry, AI features, OneDrive integration and any other anti-features this update is likely to foist on me. Also is it going to fuck with my dual boot? As far as I know my Linux SSD should be completely invisible to Windows but I don't trust Microsoft to not do something sneaky and invasive.
EDIT: I got my Win10 ESU updates sorted out with massgrave scripts! Windows 11 averted
True full disk encryption is not possible on the grand majority of computers and even for the few without extreme tinkering and modification. I would even argue calling it FDE is inherently misleading since the boot partition and kernel has to be unencrypted.
This is technically true which is why I mentioned evil maid attacks. But for most people who just want to prevent a normal Windows install from reading data from a normal Linux install, LUKS is good enough.