I work for a classic bank in Europe in development.
To unlock my laptop - I need a boot password - then I need a finger print scan - after that a password, after that a 2fa app. Then I need to connect to a VPN .. 2fa again. My laptop locks within 1 minute of inactivity. 30% of my CPU and RAM get hogged by our security suit constantly. My USB ports are disabled for data. I understand it's windows and windows can get compromised - it's just very unlikely that it gets compromised to a level where you could actually cause damage.
To unlock my laptop - I need a boot password - then I need a finger print scan - after that a password, after that a 2fa app. Then I need to connect to a VPN .. 2fa again. My laptop locks within 1 minute of inactivity. 30% of my CPU and RAM get hogged by our security suit constantly. My USB ports are disabled for data. I understand it's windows and windows can get compromised - it's just very unlikely that it gets compromised to a level where you could actually cause damage.