Recently I got tired of having random changes occur to a Windows installation I use for one purpose: running X-plane. I took the drastic measure of disabling both inbound and outbound network access in Windows firewall by default and turning off most of the pre-installed rules. Then, I allowed outbound access from the things that really need it. Spurious network traffic dropped to zero and surprises are gone. If I cared more, I'd explore profiles for enabling only useful network activity in more situations, but this has been really good for my use case.

X-Plane runs on Linux but my simulator devices do not work as well. So I keep Linux for work, Windows for flight.