[donor20]

This is really not true. Googles security posture is much more modern.

Microsoft had its signing key taken by the Chinese. That simply shouldn't be possible. They have repeatedly had breaches and in some cases comically bad holes in azure / email products / internal corporate products etc etc