[electroly]

I once set up a Windows 11 VM. Everything was great. The first time it installed a feature update, it hit this BitLocker key input prompt on the reboot. Ugh. I was able to get the key but as soon as I was back into Windows, I disabled BitLocker on that VM and every other Windows machine I use. The risk of my machine being stolen and them finding some unencrypted private data is far easier to accept than the risk of me being suddenly and completely locked out of my computer, and I care more about the latter. Security isn't just about keeping bad guys out--it's also about making sure you can get in when you need it. Otherwise the only security you need is storing your data in /dev/null.