It's crazy MS are doing this after the US Gov people publicly lambasted them (ie https://www.inc.com/kit-eaton/why-a-former-white-house-cyber...), with MS then promising to make security a core thing at MS to fix the problem.

This isn't "fixing the problem" at all. It's the opposite of fixing the problem.