I think because MS and others are approached by Universities because of things they promise businesses.
For example: A rather large University in town got hacked. They ran their own infra till then and, as it happens, caught on of the "give me money or your infra is dead" things. Afterwards a lot of not so tech and security savvy folks that where in charge of handling the rebuild and aftermath where eager to shift the blame and damage in the future - especially since said town is located in a GDPR country. In comes MS and gives the same promise as to every other entity: "Buy us and never worry about accrediting your own infra or software solutions. Also conveniently point to us when shit happens".
For example: A rather large University in town got hacked. They ran their own infra till then and, as it happens, caught on of the "give me money or your infra is dead" things. Afterwards a lot of not so tech and security savvy folks that where in charge of handling the rebuild and aftermath where eager to shift the blame and damage in the future - especially since said town is located in a GDPR country. In comes MS and gives the same promise as to every other entity: "Buy us and never worry about accrediting your own infra or software solutions. Also conveniently point to us when shit happens".
Edit: wording