> windows can be set to prohibit executing [...] on a dev machine building windows executables

lol @ "dev machine" ?!