If Microsoft’s tactic is to try to criminalise not following often arbitrary ‘responsible disclosure’ frameworks, good luck defending that in court

Because the courts these days are siding against corporations? I wouldn’t test this theory.