I mean if you’re that worried about ms having your keys, you can always encrypt with a local account and save the key somewhere else. But also if you’re that worried about v someone having access to your data, why are you using a non open source OS anyways?