605
Windows Recall is secretly installed and enabled on non-Copilot+PCs (Privacy Nightmare)
(www.youtube.com)
This is a most excellent place for technology news and articles.
Mentioned this in another comment. Take that second dism line, and put it in a batch script and make it a scheduled task that runs at login. Or use a Powershell script to make it a little smarter - check if it's enabled first and then disable it if it is.
Modern problems require modern solutions.
Any IT admins in the audience: this is what remediation scripts were made for