And that covers it right there. I didn't say that everyone should disable BDE. I said
I do. I even explained why
When Joseph, who seemed like a really good guy when he was hired, goes on a bender and comes in drunk, gets fired, and refuses to return phone calls, we still need some way to access the data on that laptop. Which wasn't on an AD. And didn't have the password taped to the bottom. But while he was a drunk, he got really good at PLCs after several company-paid courses, and the programs he was writing are locked behind that password. Amazingly enough, I disabled stupid bitlocker on that laptop, so I toss my USB appropriately labeled "Kitchen Sink", at the laptop, remove the password, and I can retrieve the programs for the next genius to finish. Or when Ms. Mable at the church, who kept the accounting on her computer, falls and breaks her hip, bangs her head, and ends up in a coma for who knows how long, someone has to be able to get the church accounting pulled back up, or they're in serious kimchi with the IRS. And that someone isn't me, because they bought the laptop at BestBuy with Win11 Home Stupid Edition, and didn't have anything installed that wasn't approved by the M$ store
and is tied to her personal Microsoft account from 11 years ago with no current cell attached to it, and for recovery her grandson's junk Yahoo account he never uses and doesn't even remember the correct address. It also has Bitlocker turned on. Both situations I've had to deal with, with a few details changed because "nunya".
Windows 11 is all about turning the water up a little more for Microsoft. When Win 7 came out, there was talk about "telemetry", and several geniuses on the Internet insisted it was only for the early beta testing, and they were sure it would be removed upon full release. Fast forward 15 years, and here we are. Telemetry that can't be turned off, updates that can't be disabled for the majority of users whether they need them or not, serial numbers that are locked to a motherboard and require even more steps than before to authenticate if you change too much, and one more link of chains to ensure the user is dependent upon Microsoft to use their computer. And waiting dark in the wings? Windows as a Service. You'll be logging onto a dumb terminal with little to no customization available, and the computer will connect to a VM of the Operating System you've been approved for, as long as you keep paying that monthly bill....
But don't worry: you'll always have the latest and greatest hardware running that VM, and updates as soon as they're available!!! whether they're ready and work properly or not....
