> keep your SBOM strict

Based on the news, seems like it is better to not include Microsoft at all in there.