TotalRecall can extract sensitive data from Windows Recall even without Windows Hello authentication.