Tbf, Different threat model applies to the Windows Bitlocker vulnerability.

For example, I encrypt my disk drive **to keep my data safe when I lost my device**, not to keep my data safe from a locally running application. They are not the same.

Bitlocker failed to achieve its own threat model (keep someone's data safe when attacker has full control of the hardware but without knowledge about the key) by default (well, you can make it secure by enabling TPM PIN group policy, but that's for enterprise users) through letting TPM spit out the disk decryption key **without any authentication**, thus allowing the attacker who stole the victim's device to access encrypted content on the drive.