https://www.microsoft.com/surface/assets/... is resolving to 2600:1409:a:18c::2768, which is owned by Akamai.

But your point still stands: even Microsoft doesn't trust Azure's CDN offering.