So let me get this straight:
in a 48-hour period, Microsoft-owned Github got compromised due to a malicious extension in Microsoft-owned VScode
and Microsoft-owned Windows has a system-integral RCE vulnerability thanks to Microsoft-owned Windows Defender... scanning a file.

