After switching to GrapheneOS on my Pixel and Cachy as my main OS for my PC, the Windows installation I keep for some stuff might be the worst offender, even though I already made it as hardened as possible.