The best time to critically evaluate which features a desktop terminal for a critical infrastructure organization really needs was before designing and deploying them. The second best time is after the Windows/Crowdstrike monster feature desktops that mostly run a web browser and printer driver have been recovered from the current situation.

#ChromeOS might be an option for organizations that benefit from the management and other integration features that come with it, but many of these terminals can be made to run with really small, tightly locked down Linux distributions. When only running what the org _really_ needs, it cuts down on updates, maintenance, and subsequently downtimes and other risks. Oh, and it will probably enable all the existing hardware to run for 10 more years without any performance issues (which is definitely not the case on the Windows 10->11 update path).

PS: But pretty please don't make the common mistake of confusing lack of required mini distribution base updates with not having to update the TCB, including the Linux kernel. The good news is that, with a minimized user space, kernel update regression issues go down as well, so keeping close to upstream is much easier as well!