This is tricky, bitlocker itself is secure and MS and it's developers have refused to put backdoors into it - but it's also designed for enterprise where admins *do* need access, and the home version needs a cloud recovery option or folks will get locked out (but local is an option)