If your IP is from $BadCountry then MS tars and feathers you, but for the vast majority of users they're not crafting bespoke crimeware to be used in APTs.