So MSFT discourages employees from reporting vulnerabilities?

That explains a lot.