This 49 minute video ends with the presenter saying that fixes for what they demonstrated were shipped in July’s patch Tuesday

The recommended mitigation is the use of TPM and a PIN, which is going to apply to any machine where the user went “with the flow” during Windows 11’s OOBE

Thanks for this, I accidentally locked my wife's tablet when I was testing if Linux would run on it from USB drive. Came back to win 11 and it was bitlocked, with no codes in her Microsoft account and no idea where else to find them. Hopefully I can study this and figure out a way to bypass it

Awww, Windows. You can mitigate that by using a PIN on bitlocker drive. Possibly.

Edit: also more secure with security keys: https://www.yubico.com/works-with-yubikey/catalog/secure-disk-for-bitlocker/