Just some thoughts, I can be wrong, and I probably have much less in-depth knowledge of the attack. To call it the largest & most sophisticated ever seen sound

Just some thoughts, I can be wrong, and I probably have much less in-depth knowledge of the attack. To call it the largest & most sophisticated ever seen sounds like ignoring some that others have mentioned here, and the fact that we don't know what others have not been publicized yet, including things like this (https://www.schneier.com/blog/archives/2021/02/chinese-supply-chain-attack-on-computer-systems.html https://www.schneier.com/blog/archives/2021/02/chinese-suppl... where we don't know everything, there can be debate; but given means, motive, and opportunity, I think at least keeping our eyes open and attempting to adopt wise practices based on realistic trust levels and long-term track records, could be a good idea. Plus I question the credibility of MS on security or anything they say, given their long track record, and when compared to others (like maybe OpenBSD), and things like this as just one very recent example: https://www.schneier.com/blog/archives/2021/02/on-vulnerability-adjacent-vulnerabilities.html https://www.schneier.com/blog/archives/2021/02/on-vulnerabil... ...?