Managing personal Outlook.com account settings, security, and privacy
The issue can actually be stopped by MSFT if they took security seriously. They can stop someone spoofing email to a MSFT mail server by preventing a MSFT email being the source. Moving to GMAIL is definitely the way to go!