Not the opinion of my employer but: no. A state level attacker can likely acquire 0-day exploits that are not patched and bypass defenses. Microsoft's offerin

Not the opinion of my employer but: no. A state level attacker can likely acquire 0-day exploits that are not patched and bypass defenses. Microsoft's offering does some really cool stuff like: - Automatically detecting anomalous behavior in the network and isolating suspected devices/ips/machines/programs. - Have real time security engineers constantly monitoring your network and hunting attackers and suspicious activity. - Tools that automatically isolate possible attackers and help measure the impact of attacks. > Can we trust Microsoft to be neutral and offer security patches in a timely manner Yes, that for sure. Once an exploit is discovered it is typically very quickly identified. A lot of the times security patches don't come from Microsoft though - if you consider something like Log4Shell (the Log4J vulnerability) for example. > defend the interests of their consumer customers above all? I'm... not sure about "above all" since I am not sure what "all" is but if the implication is that Microsoft won't patch a security flaw for a state level APT then "yes". At least - if it ever happened it happened _way_ above my pay grade and if employees would learn of it there would be outrage. > With the whole conflict in Europe, the issue of state level adversaries is raring its head again. I think state level actors have consistently been a problem. Note again as already mentioned none of this represents the opinion of my employer, just my thoughts.