Windows likes to mess with the EFI partition on updates, scrweing up bootloaders. That you can prevent by separate EFI partition on another disk, This way Windows doesn't see the other efi files to boot. But when it feesl really obnoxious, it also edits your EFI table and sets itself as the default. That doesn't actually damage your linux boot files, but you still need to log back with some bootstick and revert the change, to make your bootloader/menu the default again.

That's the reason people often switch to Windows only as a VM (there are even solution to passthrough a dedicated graphics card just for Windows, if that's for gaming) after some time. Because Windows is actively working against other OS's on your computer.

In a way their Secure Boot bullshit is nothing different. Get vendors to include MS keys by default, then pretend that Windows is somehow more secure because you need to deactivate Secure Boot to install soemthing else (who cares that one key on every machine is not exactly secure, even more so as MS keys were already found in the wild in malware so they don't even know how to not lose them...)