“Before continuing I’d like to give Microsoft a round of applause for being kind enough to plainly mark where cryptographic keys show up in memory.”
The attack on Windows 11 24H2 needs a USB stick, a shorted reset pin and a UEFI tool that dumps RAM before it fades. The full volume encryption key sits in memory under a labelled pool tag. Disk encryption exists for the attacker who has the machine in hand. That is the attacker this beats.