They could still switch to using a Linux machine for most things (that don't belong to the employer), segregating the Windows machine off as much as possible and never letting Microsoft near any of their own data.