

It’s a bit directly on Microsoft, unless you go out of your way, bitlocker will upload the keys to Microsoft. They assume you want them to help recover your data if your tpm becomes unavailable.
Interesting fun fact, when I tried to swype type bitlocker it really wanted to put bootlicker instead.




While optional, it is also the default behavior.