Regardless of legality it doesn't seem like they are running this show. Take for example the fact that Microsoft projects in Github are STILL undergoing verific

Regardless of legality it doesn't seem like they are running this show. Take for example the fact that Microsoft projects in Github are STILL undergoing verification. If MS was pulling strings there'd be no reason for that at all. Just instant verifications all around. There may be some unspoken preference towards MS or something, but, if so, it's not super evident. And given the pre-existing relationship between devs at both companies, it could also just have been there beforehand. It would be pretty impossible to know.