To be fair, they’re kind of held hostage by users’ long-held expectations of backwards compatibility, and they have made progress over the last few years. No doubt there’s nasty stuff in there still, and recent revelations about the Solar Winds hack show Microsoft has a culture of prioritizing immediate profit over security.