It's always safe to assume it does if it's closed source. I rather be suspicious of big corporations seeking to profit at every step than naive.

Also, it's security risk which already been exploited. Sure, MS fixed it, but can you be certain it won't be exploited some time in the future again?