I’m not trying to defend Microsoft, but I think people are being a bit dramatic. It's a fairly reasonable default setting for average users who simply want their data protected from theft. On the other hand, users should be able to opt out from the outset, and above all, without having to fiddle with the manage-bde CLI or group policy settings. With Intel Panther Lake (I'm not sure about AMD), Bitlocker will be entir…
Apple asks you when you set up your Mac if you want to do this. You can just ask the user, Microsoft!