The Microsoft-BitLocker episode highlights a larger design problem: when providers retain recovery keys, encryption becomes conditional.