Microsoft's product security in 2025 is nowhere near as bad as it used to be, despite a much higher amount of code deployed more publicly.
For example, Azure offers Microsoft software with various proprietary protocols exposed to the Internet that would have been unthinkable for any competent administrator a decade ago. This includes the SMB file sharing protocol and the SQL Server TDS network protocol.
It's bizarre to me to see a file share and a SQL database just "on" the Internet, no firewall or anything.
For example, Azure offers Microsoft software with various proprietary protocols exposed to the Internet that would have been unthinkable for any competent administrator a decade ago. This includes the SMB file sharing protocol and the SQL Server TDS network protocol.
It's bizarre to me to see a file share and a SQL database just "on" the Internet, no firewall or anything.