Users who rely solely on TPM-based BitLocker are most at risk, while those with a PIN or USB security key at boot are ...