Upgrade to Enterprise
(upgrading to enterprise will also remove ads in settings)
in gpo editor:
Set updates to Manual
set the telemetry level to "Security" in group policy (iirc can also be called "Compliance"). This only works on Enterprise.
opt out of Microsoft accounts. This will force account creation to skip right to local accounts as if MS accounts were never a thing. This only works on Enterprise/Pro.