I ended up speaking to an ex-Microsoft engineer, who suggested that booting into a Surface Hub SSD could have resulted in Bitlocker changing some non-visible TPM function in the EFI BIOS to lock down to booting from a Bitlocker enabled disk.
Although disabling Secure Boot, TPM, etc. didn't...