Re: "It has no telemetry and can be properly locked down without too much hassle."
I thought that they back-ported telemetry to Windows 7 and 8 ?.
https://www.theregister.co.uk/2015/09/01/microsoft_backports_data_slurp_to_windows_78_via_patches/
You can remove the specific updates, but it is still a risk if you don't keep up with the updates ???