I don't think there's a good answer here.

Users absolutely 100% will lose their password and recovery key and not understand that even if the bytes are on a desk physically next to you, they are gone. Gone baby gone.

In university, I helped a friend set up encryption on a drive w/ his work after a pen drive with work on it was stolen. He insisted he would not lose the password. We went through the discussion of "this is real encryption. If you lose the password, you may as well have wiped the files. It is not in any way recoverable. I need you to understand this."

6 weeks is all it took him.

Apple gives users the choice during set up assistant, no reason Microsoft can't.

I bet he learned a valuable lesson