Hence why most companies forbid their employees to use windows with public internet access for work

I've never worked anywhere that's done this, and I work in healthcare. Most commonly they will put you behind a proxy that does malware and data loss protection.