“BitLocker is a modern data protection feature that is deeply integrated in the Windows kernel.”
The attack starts at the sign-in screen with “I have forgotten my password.” Six steps later there is a new administrator account on a BitLocker laptop. No password, no recovery key, just a USB stick and some symbolic links. Microsoft patched it as CVE-2020-1398. Encryption is only as strong as the lock screen sitting on top of it.