Is Microsoft ignoring the biggest source of security threats?