Hacker News Reader

There is no real penalty for Microsoft here, so there isn't much urgency to address something like this.

There is though, even just OP said:

> This doesn't leave me confident of the security of any data in Microsoft's possession.

You are not wrong, though that penalty may be pretty intangible on a spreadsheet, at least in the near term.