If you were using bitlocker to replace truecrypt, you'd have a boot password and this would not affect you at all.

I'm still far from thinking this is a backdoor. It tricks the boot environment into deleting a file and then it doesn't ask for a password. The exploit is nowhere near bitlocker, the problem is that bitlocker without a boot password requires the whole OS to preserve security from boot through the login screen.

And where's the claimed version that works when a PIN is set?