I have a Windows 10 Pro machine; the administrator (and only) account is a Microsoft account. I am trying to set up BitLocker to ensure maximum security and safety, even from Microsoft.
I understand that I can chose to disallow BitLocker from saving the recovery key to my Microsoft account.
However, does this option matter at all if my user account is a connected Microsoft account anyway? Microsoft already has my user-account password. Couldn't Microsoft just use the actual password (which it has) to decrypt the data (given access to the physical drive) instead of the recovery key?
Forgive me if this question grossly misrepresents the cryptographic process.