Lets all take a step back. I think we all acknowledge their is a shared responsibility when we use the Internet and any of its services, like email. I don't want to place all the burden or blame MSFT, but they don't even have a security team that is easy
to contact.
I have been dealing with these issues for 3+ years. I had to send an email directly to Satya (MSFT CEO).
That initially got a response, but nothing since then.
My personal issue started with MSFT allowing spammers to spoof their microsoft-security-annouce alias.
Now its spoofing my own email handle.
When does MSFT have responsibility to help prevent these issues? I am guessing we are all users of MSFT services to be on this forum.