Comment by tosti

Also, disabling drivers from windows update is enforceable with group policy (iirc).

The BSDs have config, Linux can run without module support.