Didn't Microsoft stop using those in BitLocker years ago because they were often borked? [1] It's a new failure point, but it's sensible.

[1] https://www.tomshardware.com/news/bitlocker-encrypts-self-en...