I think it is fair to encrypt the user hard drive since the majority of users are unaware that they're even leaking secrets and PII when e.g., they sell a laptop without wiping the disk first.

But I think it is also fair if the user was opening a CMD during install just to type `oobe /bypassnro` the user is advanced enough to understand the risks of not encrypting the hard drive (it is really easy to activate the BitLocker afterwards anyway, and for example in my case instead of storing the secret key in Microsoft I decided to store it in my password manager). So I really don't buy the excuses of this article.

Also WTH Microsoft, why it is so easy to reset the TPM key during e.g., a bios update and lose access to all your TPM keys (so you need to type your BitLocker key again). It should be a requirement from Microsoft laptops that the TPM contents are never lost unless the user explicitly asks for it.