It's not about securing user's data, it's about not being blamed for it. It doesn't matter that China/Whichever state actor is snooping on all your user's data

It's not about securing user's data, it's about not being blamed for it. It doesn't matter that China/Whichever state actor is snooping on all your user's data. Either no-one finds out and you're good. Or the blast radius is _so_ wide, that all blame falls on Microsoft