I guess it’s becoming harder for MS to define malware in a way that would catch this behavior but does not flag their own products as well.