Bitlocker keys in Microsoft’s cloud are being shared with law enforcement—but the risk lies less in private devices than in broad access to all cloud-stored data, requiring organizations to verify whether their AD-cloud synchronization also includes recovery keys.