They agree :) Although I'm surprised; I genuinely thought that a company using Windows Update to push malware would count. But even so, MSRC did ensure that the issue was handled by the appropriate team. Kudos.