Secure against what? Security isn’t a free floating quantity, it only exists in relation to particular threat models. Microsoft has, I think rightly, calculate

Secure against what? Security isn’t a free floating quantity, it only exists in relation to particular threat models. Microsoft has, I think rightly, calculated that the risk of losing access their data is worse for most users than the risk that the government gets a warrant for their recovery key. And if you want to protect against the government, then it’s really easy to set up Bitlocker to not backup to MS. You can change the key with one or two commands, or with a GUI, even if you use a Microsoft account to sign in. In any case, I’m not saying the Bitlocker design is perfect. There are good arguments to be made in favor of the iOS or Mac models (which are slightly different, even to each other). Microsoft also has the unenviable problem of dealing with shitty OEMs with buggy firmwares that change the PCR values unexpectedly, locking users out of their data and requiring a recovery key. But your original claim—that physical attack protection is novel to ARM-based Apple devices—is just completely wrong.