If you must stay on windows, use a real encryption software like Veracrypt to protect your disk. Its the successor to TrueCrypt and supports pre-boot auth and all kinds of real encryption methods that won’t be broken by a shit vendor being a dick

https://veracrypt.jp/en/Home.html