Yep. Microsoft lets users upload their drive encryption keys to their Microsoft account. Then the account is pegged to SMS, Microsoft Authenticator, or (best) a

Yep. Microsoft lets users upload their drive encryption keys to their Microsoft account. Then the account is pegged to SMS, Microsoft Authenticator, or (best) a FIDO key. The problem is what happens when they lose the key. Falling back to SMS lowers security to social engineering your phone company.