Sometimes I get prompts from Windows Defender that it would like to upload some files to Microsoft for further analysis. The weird thing is that they are well known binaries from official sources, for example node.exe (Node JS). Just to be sure a couple times I checked the digital signatures and all that.
Doesn't Microsoft download important applications to analyze or whitelist itself?