“Currently, Microsoft directs the vast majority of their security investments in revenue generating roles instead of internal security roles.”
Microsoft makes more than $20 billion a year selling security products to over 1 million customers. Its own house let a China-linked group walk off with 60,000 State Department emails, and Russia’s Midnight Blizzard read executive inboxes. The government cannot fire it because the government is locked in. Microsoft sells the locks and leaves its own door open.