Perhaps it might not be able to before you log in but afterwards it can?

>>105868926 (OP)
It's theoretically possible depending on the way the encryption service stores things in RAM and whether or not the contents of RAM persist or are reset/randomized after a reboot. If it was some highly sensitive data and not just personal shit I personally wouldn't ever boot the system with Windows since it's closed source and you don't actually know what it does in the background.

>>105869089
So it's a terrible idea to dual boot Windows an Linux?

>>105868926 (OP)
nope but your ESP Is unencrypted so in theory they could fuck with your kernel

>>105869632
I am dual booting windows and linux, my windows installation does not recognize the linux drive but my linux installation can freely look through the files on the windows drive. None are encrypted though

>>105869089
A TPM encrypt without exposing keys to ram since a decade ago.
Only fools using shit like true/vera crypt and luks without tpm are exposed.

>>105869979
I don't think they would make it obvious.

>>105869639
Secure Boot prevents that

>>105868926 (OP)
it can but changing any of the encrypted data will break all of the data
so the only thing it could do is wipe it ig

>>105870004
Keys are encrypted in RAM with Veracrypt and wiped upon exiting the app. The only way someone gets anything useful from a RAM dump is if you disabled those things.