On: I noticed some disturbing privacy defaults in Windows 10

[MBCook]

Why show the non-prompt? The users who don't want it can turn it off later, as is the case now.

[TillE → MBCook]

"Later", as in after the key is sent to Microsoft? Not very useful.

[simoncion → MBCook]

I want to encrypt my drive, but ensure that the encryption keys never leave systems that I physically control.

I sure as hell don't want to encrypt my drive a second time because the default setting (that I could only change later, when I'm actually using the computer) for the drive encryption software was to upload the drive crypto key to The Cloud.

Or am I misunderstanding your question?