Not only that, if someone has a tech knowledgable person set up their Windows 11 computer without online accounts MS updates will cause it to spam the tech-ignorant person owning that computer with misleading pop-ups saying they need to press this button to do $x thing. Which then secretly sets up online accounts which automatically and silently enables drive encryption. Which causes it to go to a bluescreen saying to go to some shady looking URL at aka.ms and type in a long code that appears on your blue screen only broken computer. It's basically ransomware. This is not some theory, I had this happen to a sewing machine laptop I set up for my mother.

And yes, I later learned that aka.ms is a real Microsoft URL. But when it was first described to me it sounded exactly like ransomware and had exactly that effect.