Earlier quoted context omitted.
Not spying on me and not transmitting unknown to me personal information to unknown parties would be a killer feature. I treat any windows machine as if it has a keylogger and submits all my activity to all major governments (maybe only one today and “all” in a few years when my data gets sold, shared or stolen). This is a serious issue for me.
disclaimer: MS employee, this is solely my opinion Does the GDPR do anything to put your concerns on this issue to rest? (By those regulations, MS is required, under penalty of very large fines, to not do what you are accusing them of doing.)
If the company starts doing things right ONLY after there's some legislation making the wrong thing illegal, what does that tell you about the company?