They are focusing on preventing local account upon setup. As long as you have Microsoft account tied, they are open to let you have as many local accounts as you want.
This would be more acceptable if they didn't unconditionally use software encryption by default. But, nah. Microsoft is going to Microsoft and force their preferences down the consumer's throat, and there doesn't appear to be a way to upgrade it to hardware encryption without a wipe and reinstall.