For laptops, yes, that is the standard. Prebuilt desktops maybe/probably. For custom builds (me), the end user (builder) decides.
Same here - on both being active out the box and preferring it that way (for laptops).
For clarity, and to quell thoughts that you can simply extract it from the TPM chip. You can't. That's not how it works, so don't lose your key!!! Been there, done that. But yeah, I keep mine in my Microsoft Account as well as my OneDrive Personal Vault.
Extract from this article: "Your PC needs to meet the below hardware requirements if you want to use Device Encryption on your PC,
To encrypt or not is a personal choice depending on ones' own situation. I use a PC as well. My choice is no encryption.There's not a darn thing on this computer that is of any benefit to anyone but me. No passwords are saved in my browsers (I use a password manager protected by an 18 digit master password) and the few important personal files that have any sensitive information in them are stored in the cloud. (not onedrive different cloud with different account and pw) To my way of thinking, it makes no sense for me to encrypt, plus I'm old school and want to be 100% in control of my drives and data with no interference from the tpm.
It's funny how many different ways people use their computers. For me, my entire life is on my computer. I have important documents, my entire software collection with license keys including purchase details, etc.. All my private e-mail is on a local file on my PC, scans of important documents like my passport, etc. are also there. So, for me, it is entirely the opposite. I'm ultra paranoid about security
