If it is a machine you don’t use frequently, then Windows Update + Windows Defender will use a lot of CPU at startup until they have finished what they are doing, which could take many hours.

Yes, but most business customers, or the people that advise those business customers, choose stuff that they have already tried out on their homelab and are familiar with.