In this Surveillance Report, I’m covering a story that should make every Windows user pause: Microsoft handed BitLocker recovery keys to the FBI (with warrants) to unlock encrypted laptops. The bigger issue isn’t just law enforcement access—it’s the default setup. On many Windows devices, BitLocker recovery keys get uploaded to Microsoft’s cloud, which means you’re trusting Microsoft’s internal access controls and their security posture. And as cryptography professor Matthew Green pointed out, if a cloud provider gets compromised (which has happened before), recovery keys can become another juicy target. I break down what full-disk encryption actually protects you from, why “login passwords” don’t stop someone from pulling a drive and reading your files, and what you can do about it. If you stick with Microsoft’s approach, upgrading to Windows Pro can let you save the recovery key somewhere other than your Microsoft account. If you want a more transparent route, I recommend looking at VeraCrypt for full-disk encryption (or encrypting specific folders). I also compare this to FileVault on macOS (with clearer choices and iCloud Advanced Data Protection) and LUKS on Linux. Then I run through the rest of the two-week roundup: age verification laws spreading across the UK, France, and Florida; malicious browser extensions with massive installs; a weird lawsuit claiming WhatsApp has “no” end-to-end encryption; a trusted Android launcher selling out; and more evidence that social platforms engineer addiction by design.