yeah I'm using enterprise rn, can even completely disable ms accounts, as in the os just completely forgets they exist (except per-application logins of course, by ms accounts i mean the os-wide integration) like when you go create an account, it just skips right to local account creation... copilot can be disabled, widgets can be disabled too...
if you have enterprise edition you can actually disable telemetry instead of trying to block it (aka the "Security" level (iirc it can also be called "Compliance" or sth), all other versions only allow "Required")