How about cryptolocker? It doesn’t come standard?
If you want privacy, I would recommend against any Windows OS from 8 onward. With their takeover of the UEFI BIOS, you have no way of securing your base PC against anything that Microsoft deems "safe."