Is that last part even still true? When I played around with it they asked me to store a recovery pass phrase off device in case windows hello breaks