Interesting! I guess there's no way to fix this with further regulation either, since it would be some work to prove MS had access to the API contracts before they released them.

The ultimate lesson then is to stop using MS stuff.