Don't be naive and think they can't block this stuff because of encryption. They just go after the business entities. Eventually you'll only be left with super sketchy options that they'll try to block by IP.
They probably won't totally succeed, but they can make things far shitter than they are.
Windows 11 IoT LTSC is very good. I don't know about the normal consumer version.