Linux: you set a system from bottoms up, adding/enabling layers and features.
Windows: you set a system from top down, locking/disabling features that shouldn't be available.
Windows has tools to control and restrict updates/installs, with a full centralized logging system. You will rarely find log files, it all goes into the centralized log (think systemd log). Some failed installs may leave behind log files in temp, so be quick at getting them or they'll be gone.
If you have non-Windows programs and tools installed, you can use either the msstore, winget, or 3rd party choco and scoop, or all of them via WinGetUI.
Many admin tools are only available on the CLI via PowerShell. Some may or may not conflict with how their GUI counterparts work.
Additional built-in tools... are "secret". You may get a glimpse at some of them by checking the "install fix" tool or similar, but it may use non-backwards-compatible calls, which is why they're not made official.