Microsoft has detailed how it’s improved Recall’s security with encryption and Windows Hello authentication. Recall’s data is now isolated in a VBS Enclave, meaning it’s no longer readable by third-party apps and users.
Source: Read More / Windows Central