Thanks. I'm filing that phrase away for future reference. Again, I am just stabbing in the dark from the outside here:

From my external POV, it feels like for all its faults, Google/Alphabet took the time to create BeyondCorp, and does not have the same record of infosec errors that Microsoft seems to regularly display in recent times.

Is that correct? If so, in your opinion, what is the difference? They both print money...

Is this just a difference in "corporate culture?"

Disclaimer: I grew up in Kirkland/Redmond, have a bias that is favorable towards MS, and would love to understand what the heck is happening.