I
have been testing for two weeks... The only exploit I can think of is CU will not overwrite a newer version of Edge installed by MSI. Now if you can fake Windows into thinking Edge was provisioned when it's not...
Nuhi asserted in this
thread, removing Edge using NTLite will register DoNotUpgrade. This is not true on the current release.
I checked the mounted registry, it's not there unless you apply it. For reference, using
Shep's mods.
People don't realize OOBE runs WU (to install "critical updates"), this cannot be skipped. This happens before Post-Setup.
If you're online then WU might replace IE for you. What the WinPE powercfg investigation taught me was
execution order is critical to understanding why something works. Moving a command one step ahead might make a big difference.
Shep's build is most interesting. From a pre-install view, it's the most free of IE or Edge references in file structure and registry.
Deprovision regkeys are there, enough required IE legacy bits are left behind, folders are clean.
It's perfect until you run WU and install LCU. Splat.