Microsoft is a company that has never been able to figure out how to make stable or secure code in half a century. It’s arguably the company that is single-handedly responsible for creating the entire antivirus industry.
If you run a Microsoft security suite on your Linux box, you must have been kicked in the head by a large horse, and you shouldn’t be surprised if your Linux box has Windows-level security.
I have been on the cloud vendor side forced into using these crappy Microsoft protection tools because of the daft Azure compliance framework. Customers would ask for your score on this and your score was impacted by how many of these very expensive services you had enabled. THEY DID NOT WORK! We had an independent security testing org prove that uploaded malware was half flagged by defender for storage but then no subsequent downstream events were triggered. Microsoft simply said “known issue and will be fixed at some point”. Un-fucking-believable. Azure compliance framework is 100% an Azure services upsell versus a genuine security focus initiative.
