In any case, minimize the number of parties that will have their hands on your data. Uninstall anything that’s unnecessary, compartmentalize personal work in a privacy-respecting browser and office suite, and avoid unofficial Windows ISOs.
If your school is going to install monitoring software on it, consider the laptop compromised. Only do coursework, accessing things licensed through the school, exams, the bare necessities, on the Windows laptop. Start saving up for a (refurbished) laptop to learn and use Linux without risk to your work laptop.
If now is not the time to buy another laptop, consider installing Linux on a second SSD, if a slot is available, or even a USB 3.0 drive, if you’re allowed to boot from one. Just back up and if possible remove the Windows SSD before installing so it’s not overwritten by accident.
Be judicious with debloat scripts as they can interfere with some more invasive programs (e.g. Adobe suite, Autodesk) you may need for your studies. Consider making full disk backups before doing anything drastic. Anyway, if you can’t or won’t use LTSC, the yearly Windows updates can and will undo your hard work debloating and ticking privacy checkboxes.
At the end of the day, Windows is closed-source and we can’t be completely sure what it’s doing behind our back. It’s fine for a dedicated work device, but the time spent on taming it for personal privacy could also be spent getting another machine and getting to know Linux.





I would be too lazy to, unless I eventually encounter my ‘gateway drug’ to i2p.