[project candidate] consider settings that are OS standard to be true even if the responsible registry setting does not exist

[TuemmlerKelch]

A lot of settings are properly configure from the get-go and just to be considered unsafe if manually created in a non-compliant way.
Cis benchmarks have a lot of insight on this topic.

This should be implemented for
Windows 11 + Server 2022
Windows 10 + Server 2019
and maybe for Server 2016, too