

Most (US) companies don’t consider the US government to be a significant risk to their business, partly because they’re already subject to it.
They also commonly believe that Microsoft can secure these keys more effectively than they could do so in-house. And they’re probably right.
Now, it’s an entirely different story for any companies not subject to US law.


This is basically the exact scenario that led me to detail that I was only talking about consumer gear. Server gear is a very different beast, with a variety of tradeoffs that I didn’t want to get into. For instance, I’m assuming you can only use Registered RAM.