FileVault encryption requires authentication. ThemacOS Security Overviewstates, "When FileVault is enabled, macOS Recovery requires a FileVault-enabled user account and password to decrypt the disk." Option D (Recovery Lock) uses a separate password, not user selection. References: macOS Security Overview, "FileVault in Recovery" section. Apple Platform Security Guide, "Recovery Access" section.