If its for work, its on a work machine.
That said, I have a lot of efforts (personal projects with hardware I get given, or side work not related to my job) where I need specific software. For those, I have a VM tailored to that application that’s been trimmed down as much as possible.
This let’s me rdp into them, do what I need to do, save to a designated location, and shut the VM down. Since its a VM I tend not to give it network access unless required, and I have USB drive I pass through to the VM.
This makes sure everything works, I limit the access of MS with local only accounts and win 10 (among other specific versions like XP for a specific piece of hardware, server 2008 for an irritating piece of software I sometimes need, etc).
All the VMs are on my proxmox cluster, easy to start/stop with a script.












They did not.
S8 was such a complete pile of shit that they lost the deal.