Comment by daxelrod

MS is still probably somewhere in the supply chain of software you use.

They have contributed to the Linux Kernel, they own GitHub and NPM, they make an extremely popular editor, among other things.

It’s a different set of risks than depending on them directly, but they’re still there.