Why are new PCs included in the 'Azure Active Directory' domain by default?

Question

Active Directory

Questions:

Actually, why is this necessary at all (at least it is strange to do this by default)?
How can I get to this domain controller?
Since if I do not have access to the controller, then naturally any policies (GPO ...) can be applied to my system without my knowledge? Those. even the last illusion of privacy and anonymity is lost?)

PS: I am not an expert in AD and Azure, but I will be glad if someone explains these things to me.

Answer 1

1. There are no GPO policies in Azure AD.
2. If the new computers are included in an Azure AD domain, then your organization has decided so.
3. If you mean a regular new user computer - there is authorization through a Microsoft account or an offline record - there is no Azure AD there.