If you don't need to stay signed in to do this, I'd recommend creating a second throwaway account in windows, doing all that, and deleting the account when done. Less chance of any Microsoft account remnants polluting your main local account.
This is the way.
Much faster and less complicated.
I set up an MS account for new install only (eg W11 upgrade of unsupported CPU via Rufus), saved the generated encryption backup key, then removed the (empty) account from the PC.
I wouldn't care that it backed up the empty desktop,empty documents and empty browsing history.
Just create one then toast it afterward.
If you want or need to continue using Microsoft products you'll need an account to exist at key times.
Hopefully it will remain possible to remove it immediately afterwards.
