Windows 10

[tnsi]

Windows itself is scary shit, and if security is a concern, you don't want to use Windows- you can't reliably audit closed source software.

Sending photos, passwords, and Facebook Messages is an over-reaction. If you use OneDrive, then yes, you send photos since that's where you cloud storage is. If you use a Windows/Outlook/Live account, then yeah, you send them your password, but it's certainly not plain-text. They can verify if you type your password correctly, but don't actually know what your password -is-. If you've using one of those accounts, though- your email is naturally a service provided by them, and they can certainly view it, but the same applies to Google, Yahoo, Zoho, AOL...etc.

As for Facebook Messages, Facebook stores them on their servers (and we actually know that Facebook parses them for data for advertising and data selling). When you're accessing stuff from Facebook, it's encrypted over the secure sockets layer (SSL/HTTPS) of the network. The closest thing that you get to sending them to Microsoft is a RAM dump, but otherwise, Microsoft would have to be buying them from Facebook. Facebook would never let that happen, right? /s

Edit: Those Basic/Enhanced/Full settings only matter if you trust Microsoft. If you don't, there's no difference. Use VeraCrypt and encrypt things yourself.