From <https://arstechnica.com/gadgets/2024/02/raspberry-pi-bitlocker-hack-is-a-new-spin-on-a-years-old-well-documented-exploit/>.
I just love this bit:

Then run a Command Prompt window as an administrator and type
manage-bde -protectors -add c: -TPMAndPIN; you'll be prompted to
set a PIN for the drive. Once you've done this, the next time you
boot, the system will ask for a PIN before it boots into Windows.

Remember what I said about Microsoft trying to turn Windows into
Linux?

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)