It’s password only, non tpm and it still creates a recovery key. Why tho?

linux doesn’t do that when using LUKS encryption. trust me I’d love to switch, but can’t.