If we can’t trust Kaspersky, should we trust Microsoft?