I'm fortunate enough to have WSL so I frankly do everything in bash. I am also in control of the Intune endpoint exceptions for development machines, to make sure they are allowed to run stuff like cargo, but it has the advantage of letting me remove my devices from the Adobe Acrobat group.

It's still hilarious when defender does it's thing and the fan goes mach 1, or when the firmware updater force reboots in the middle of a meeting after you've clicked the 10 minute extend two times.

It is what it is. I'm sure we'd figure out a way to make enterprise IT horrible on any OS.