Microsoft being Microsoft. Of course they have to say they're going to do more. The reality is when you offer essentially infinite backwards compatibility, you attract companies that have zero desire to invest in their digital infrastructure and software.

Put another way, Microsoft seems happy to sell people the rope they use to inadvertently hang themselves with. Software is infrastructure, and safe and correctly maintained infrastructure is expensive. Corporations are externalizing machines, so we all bear the cost of poorly made software. Cybersecurity as an industry would be 90% smaller if software development wasn't "move fast and break things" and more "let's get this 100% right, formally verify what we can, test it for months and then release it."

Anyone who thinks Microsoft is anything but entirely complicit in making the world a significantly less secure place is either woefully ignorant or a fool.

"Your privacy is very important for us" when they suck all your data with Edge.