Bitlocker enabling by default without user input is horrible.
I disagree
Hosting the keys online is also horrible.
I agree
It shouldn't require a loophole to use Windows without a Microsoft account. Cloud hosting the bitlocker key does remove a lot of the security benefit in the first place. But I also recognize if you're going to enable it by default, you have to automatically store it somewhere since most people will not save it themselves. But Microsoft should not be able to access the keys either, they should be fully encrypted without the users password.