I’m still creating local accounts using the bypass in the auto unattend file.

If a drive is crypto locked and there is only a local account, it might as well be wiped if nobody has a password.