Whether or not it would be helpful to attackers, this is still the correct threat model for Microsoft to operate with. Sufficiently motivated attackers can reverse anything they distribute publicly anyway.