Did I miss something in the article? The user can get their recovery key by logging into their Microsoft account. You don't have to jot it down, that's why it's only turned on when you sign in with Microsoft account so the recovery key can be backed up. Users are absolutely not expected to be that good with key management.

Absolutely zero mention of key escrow, the user can likely get their data back. https://support.microsoft.com/en-us/windows/find-your-bitloc... The "Attached to your Microsoft Account" section.