because time to market is more important than security (at microsoft)