windows_security

> the guide recommends application updates only for enterprise users No. Maybe read this part https://github.com/jmau111-org/windows_security#7-recommenta... > strong passwords [...] counter to NIST and other accepted guidelines I don't think it's the case. Even if it is, I would disagree with that point of view. > It should be mentioned that common Windows antivirus and endpoint security software is in itself a security risk [...] Similarly, phishing attacks are enabled by common Windows-based applications such as Outlook Lots of confusions here, to me, but thanks for your comment overall. In fact, the guide tries to keep things simple but could certainly be improved on some points.