> The point is, that if your organization has chosen an enterprise security platform, you don't make exceptions because of ideology

You're right. MS can always blame state actors when something fails. /s