If you turn off the recovery environment Bitlocker works as expected.

It is really bad but not impossible to mitigate