This is all correct, but it’s been fairly well known since over 15 years ago that BitLocker only really protects a computer if you configure BitLocker to require a pre-boot password, and also only after you turned off the computer [0].

[0] https://en.wikipedia.org/wiki/BitLocker#TPM_alone_is_not_eno...