Hey abacab. It turns out that I already have a local account for both my Win 10 computers. I'll go ahead and use Avira instead of Defender. You mentioned turn off everything related to a Microsoft account, and MS cloud apps. Including all the modern tile apps, Windows online search, etc.
Is Windows online search the same thing that I see in Services called windows search? If so I used to have that disabled and see now that MS turned it back on - grrrr, so it's disabled again. I also have disabled in services: google update services, adobe acrobat update. I had to redo them since they were turned back on.
So does the local account automatically turn off MS cloud apps and all the modern tile apps?
What about what you said about updates locked down with policy editor. Maybe I should do that also. Can you explain that too?
Thanks for all your help,