I'm kind of surprised that Microsoft aren't able to preempt this scenario better, with the amount of money they're pouring into SecOps and surveillance.