Comment by ChrisArchitect

Related background:

Windows telemetry used to track web activity, link VPN activity to source IP

https://www.justice.gov/usao-ndil/media/1450651/dl