"Microsoft has always taken the stance with vulnerabilities and attacks that once a device is compromised, all bets are off, and security boundaries are thrown out the window."
This is all well and good, except with #Recall attacker will get access to data that occurred (even temporarily) on your machine *before* the compromise happened.