Since I don't think some people are grasping how bad this is:
Bank Data;
Health Data;
Passwords;
Student Data;
Privileged Information (NDA's contracts, etc.)
Addresses
Unless a) your job has some version of windows that doesn't have these systems and tools in it, and b) work/life firewalls are PRISTINE, and I mean literally ZERO interconnections, even via email or calendars, the entire windows 11 OS has just become a threat surface.
And for anyone who's like "PShh! no organization dealing with sensitive data is gonna allow machines that ship with this into their org's networking ecosystem!": You're wrong.
I *Just This Last Week* got a new laptop from my university and copilot was already enabled, and pressing the "copilot" (reskinned context menu) button overrides even the group policy editor-level fix to turn it off, immediately reactivating it and resetting the GPE toggle to default.
So. Yeah. Bad.