[Krssst]

Considering Windows's history with user consent I would be worried about the keys eventually being uploaded without asking the user and without linking online accounts.

Probably not now but not something unimaginable in some future.

However, since Windows can still run on user-controlled hardware (non-secure boot or VMs), I guess this kind of behavior could be checked for by intercepting communications before TLS encryption.