Can't address authoritatively, but speculatively, there is reason to believe they would use device telemetry to check their platform exposure to malware. It's

Can't address authoritatively, but speculatively, there is reason to believe they would use device telemetry to check their platform exposure to malware. It's a blanket excuse to say "security," but the only viable malware detection works by inventorying telemetry off-device, as on-device can be detected instrumented around by any advanced attacker.