Regardless if size,companies are not law enforcers. MS is also not responisble for the OS it has already sold to customers, that OS is not their property or concern outside of patches (fixing what they broke before sales).
I hate this idea of corporate heroes,next thing they'll let them do offensive operations (hack the hackers without any due process or authority).