I agree with a lot of what JamesNT said. I am NOT it or text support but I do learn as I go.

As for office365, from what I have heard office365 is being heavily targeted with spoofing and even smart people are falling victim. I friend of mine who runs an it business has recently been testing his clients and own staff with spoofs and he said some of the smartest were clicking the links. Microsoft article on it. https://www.microsoft.com/en-us/sec...-and-misconfigurations-to-spoof-domains/

As for me, I hate the subscription model. I hate logging in. Way too cumbersome. I personally have been using libre office. It's free and great. Open source. You can change some settings to make it save as .docx which is Microsoft's file. You can set it as default program for everything but Microsoft makes it a little tough

Windows 10... Your computer may actually be able to be upgraded with an official work around. Microsoft claims these computers were not chosen to be automatically updated for some reason but it's because they want to sell more licenses. Microsoft used to have instructions on how to do it on their website but looks to be removed. This article walks you through it. https://www.pcmag.com/news/microsoft-offers-tpm-20-bypass-to-install-windows-11-on-unsupported-pcs


As for back up. My office does this. Back up on the server. External hdd on the server, external drive on different computer. Every two days one of those is swapped with a third drive that is taken home. We used to do it daily but got lazy. Now it's MWF. if we are hacked and they lock the server we have an external drive on the server. If it was locked too.... Well fine. It's sort of used as a decoy second back up. Then the other in office is the real one, but what if the office burns down... Well we have the one at home. What if your house burns down, well we have the one at the office... What if both do...uhhhhh.... Well that's why I'm planning to get things automated so I can have back ups everywhere... Kidding.

What about cloud back up.... The problem here is when they get hit with ransomware. Small offices are at risk but hospital systems and medical things are a gold mine. Nethealth got hit and paid after 2 days. Major hospital systems get taken down. Something I used to use, cloud based, got hit with the heartbleed attack.

If you depend on cloud and were hit hard when half the world went down because someone didn't test an update in the sandbox but just let it out then you know why not to.

Biggest thing... If you remote in to your computer, use Google remote desktop or even better use tailscale and remote desk top. Whatever you do, DO NOT expose remote desktop to the Internet itself. Bots will start penetration tests within 24 hours. There is an entire search engine out there to find exposed ports and remote desktop sessions etc.

Fun fact I learned over the past two days... My office we use iPads or laptops to control our desktop computer using a remote connection. It's faster than trying to run the program on the mobile device and pull from the server via Wi-Fi. Even though tailscale technically goes out to the cloud then back to your office, it doesn't have to. My office Internet was down. Our server is on site so all hard wired computers had access. I could use my iPad with tailscale and Windows remote and still access my desktop so it fell back to LAN (local area Network) mode and I was going just fine whereas everyone else could not. Tailscale is honestly very simple to set up. The most difficult part was figuring out the remote desktop app.