I mean, Microsoft and Security, those two words have never really been associated with each other in a serious conversation.
They're quite famous for being lax in security - mostly because they're a massive corporation, but also because they're high profile
That's why the comment said "outside Microsoft".
But keep in mind Google got hacked by the Chinese in 2009 or so.
loading story #50310031
loading story #50312135
Back when APTs were getting numbers, the joke was that Microsoft was "APT -1". The presence of windows/excel/outlook in your network was more of a threat than Anonymous, China and the DPRK put together.