Put simply, to Microsoft, my company’s continued business is worth more to them than my company’s nefariously-gotten email are.

The chance that they become a hostile actor to my business is effectively zero. Certainly among the lowest chances of any email provider.

> The chance that they become a hostile actor to my business is effectively zero.

I guess the same holds for this malicious (?) single developer.

No. The benefits to Microsoft from taking my business emails are negligible compared to their revenues. That’s not the case for an individual with malicious intent.