This old bit. Look. Just because it's a centralized point of distribution doesn't mean it is desirable to suddenly plop on a responsibility to police the world

This old bit. Look. Just because it's a centralized point of distribution doesn't mean it is desirable to suddenly plop on a responsibility to police the world's software. Furthermore, if you're not auditing new versions of dependencies before you let them loose on your systems, that's all on you. Writing software is a bit like sex. You make one mistake, and you end up supporting it for life. Always practice safe dependency management. Microsoft has no nor should they have any responsibility, to protect anyone from anyone else. Especially with their propensity for going overboard in that regard.