If you don’t control your keys, you don’t control your data

The article argues that Microsoft's practice of encouraging BitLocker key backup to Microsoft accounts enables compelled access and undermines data sovereignty, turning exceptional lawful access into an architectural default. It contrasts this with designs by Apple and Google that keep decryption keys with customers, warns that centralized key custody expands the attack surface for nation-state actors and systemic breaches, and urges vendors—especially Microsoft—to make customer-controlled keys and recovery mechanisms that exclude provider decryption capability the default.