I'll also say that if your only protection is BitLocker, then you have shitty operational security. Especially if you log in with a MS account and knowingly backup your BitLocker key with them.