"or the case that you don't trust Microsoft at all" - I do not distrust Microsoft, I think its software will continue to be as secure as it has always been. Please, trust is one thing, a secure thing signed by an insecure thing is another, as in "a trust chain".