I believe users are given an option on Windows setup to encrypt the drive with Bitlocker or not. I've done an install in the last few months and seen it.

They should also be given an option of storing the keys in the cloud service tied to an account. Most would still click yes, but the fact that law enforcement can ask for those keys without your consent is an issue.

Here is a question for you though, you probably have those backup codes for services stored securely somewhere, but does everyone you know?