Talking here about regular x64 OS install not ARM though, have not played with that myself.
Not really, it is usually PowerShell scripts from trusted blogs or in case of local account creation, you run a batch file that is built in installer (oobe\bypassnro) that adds a single registry value. Not sure I would call this hacking. Then again I don’t think Linux 10 years again had problems with account creation as well.
Would be nicer if you could create local account out of the box? Sure. Do some prefer MS account? Also true.
Here is a video demonstration. Snapshots contain window that is in focus not the whole desktop and for exclusions I assume it would just base it on process name + additional parameters (private browser windows have same process name so must be something additional). You can also add websites for exclusions. Here is an article that lists other things that are not being captured like DRM protected content and one time WhatsApp images.
Also from support article: