I remember asking Steve Balmer somewhat before this (late 90s?) "will Microsoft ever prioritize security over new features?". He looked at me like I'd kicked his puppy and said "we would never do that". Culture comes from the top and all that...