Wasn't there some directive within Microsoft to fix their security issues? How many other OSS repos of similarly sized companies get compromised like this? No

Wasn't there some directive within Microsoft to fix their security issues? How many other OSS repos of similarly sized companies get compromised like this? No one ever got fired for choosing IBM or AWS - but apparently Microsoft has a decades long free pass everywhere. Insane.