You also have things like mimikatz - which is only a thing because Windows just stores user's passwords in plaintext in lsass memory -, pathetically weak hashes, pass the hash etc.

Catastrophically-bad-by-design authentication is a Microsoft staple.

Do you have a link to a cve or vuln report? I’d like to read more