In a way, the restrictions which used to be exclusive to Home are now part of Pro, the more expensive Pro for Workstations is what Pro used to be and Enterprise (also available through a per-user subscription model instead of a per-machine model, cheaper in a way for individuals with 5 PCs nobody else uses) also has some extra toggles not removed.
I think the subscription versions also include an Intune license which is the only supported way (other than installing third-party AV) to disable Windows Defender permanently, as well.
Now, MDM-managed Apple phones still come with a number of core restrictions, though I believe there's more loose side loading on there - however you have to register Apple hardware into MDM at purchase time as only authorized resellers can grant this access to a serial number.
Also, almost every patch has issues these days: that hardly ever used to happen. Their quality has taken a dive.
I am not saying that is isn't the perfect tool for many people: it has been for many years. The issue is that when I wanted to change things and leave them changed, I used to be able to do that. Now, they are doing their best to remove that ability! That makes no sense! Let me break it if I want! I have no warranty anyway!
Disable Windows update and it comes back on due to the Windows Update Medic Service. Ok, disable that then! Oops, you're not allowed. Ok, I can circumvent this by changing permissions on the dll and then deleting it. I'll then run updates later at a time of my choosing. Now I run updates. Oops, it's back again! Microsoft knows best.
By all means make it easy for the "typical" user. But I wish they'd stop taking away the underlying power-user stuff because they think they know best!