Keep in mind that Microsoft is a large organization, and they have to carefully consider which action is actually 'the greater good'. For example, making a brea

Keep in mind that Microsoft is a large organization, and they have to carefully consider which action is actually 'the greater good'. For example, making a breaking change (like deprecating SHA-1 in Edge) might force external developers/vendors to update their servers to SHA-256, but it might also encourage enterprises to avoid updating to Windows 10 entirely, and, overall, that's far worse than letting SHA-1 certificates kick around for another six months (especially since those certs won't work with iOS 9, Chrome, or Firefox anyway). Apple can get away with ATS because for every service/site/app that doesn't bother to update, there are ten other apps waiting in the wings to steal your users. On Windows, there's little incentive for most people to upgrade, and strong existing disincentives for enterprises/schools/organizations.