Yeah, Windows Defender does worse if you let it have sample submission on. It'll send binaries to Microsoft and they will run in Azure!

https://medium.com/sensorfu/how-my-application-ran-away-and-...

That said, "this has happened forever" is false too. These behaviors are relatively new and relatively under the radar. Many people don't know they exist to get upset about it.