So I don't want this to come off as rude, but if you are using the pro version with proper workstation controls all of this is controllable. I work as a L5 engineer for the world's largest outsourcing IT provider and we don't have a single customer (from ITAR, HIPAA, Financial, Manufacturing, Pharmaceutical etc) that has been unable to move because of compliance. Some take longer to harden and move but it's 100% possible. MS knows their audience in this space and wouldn't release and OS that wasn't possible to comply. (for the MOST part, obviously things like EU antitrust has made them change some things in the past).