Microsoft has improved Recall, but biometrics are only required for setup and users can open it with just a PIN, and sensitive data filtering is unreliable (Kevin Beaumont/DoublePulsar)