randombullet

I use adguard home in conjunction with NextDNS.

I find adguard a little better in the UI department. Have it in a docker container so it’s a set and forget.

Yeah there’s no foolproof way to do a general upgrade. Wiping is the easiest way to bypass the tpm requirement.

If you absolutely must use windows

Download the Pro ISO from windows.

Use MicroWin to create an iso without tpm requirements and with offline installation

Use MAS and use only the Enterprise edition. You might need to upgrade to Professional first.

Then use WindowsDebloater to tailor it to your liking.

We just started the spiritfarer. Absolutely worth it