It's bizarre that you're doubling down in the face of statements from Microsoft's security experts who have the full context of the investigation and the source code. It's worth some self-reflection on what drove you to make this post.
The boilerplate FAQ text is frequently wrong or incomplete. You can go through the catalog and look through some of them and see how many have multiple revisions. I think, if you want to know definitively, you have to patch diff it
Where does it say that you can't be phished with a bmp file?
Maybe you should self-reflect on why you are offended by my comment. You might learn something about yourself.
loading story #50397034