I was updating my laptop’s TPM firmware the other day and was using the latest 11 Insider build. I disliked the idea of disk encryption since back in 2015 when it was confusing dealing with discard/trim and LVM on Linux, and never bothered with BitLocker by association.

It was only during that TPM update that the updater warned me about needing to suspend BitLocker; I don’t know what the alternative option was but I was more interested in actually checking if I had enabled it without noticing. It was automatic, and most importantly it wasn’t noticeable up until that point.

That is how disk encryption should be done!