No way ... MS can buy Hollywood with pocket change. Also the moment they sign something like that - no more business with enterprises and national governments. The integrity of windows and office is imperative for them.

Last time I checked MS was still in business.

http://en.wikipedia.org/w/index.php?title=Sony_BMG_copy_prot...

This was done without MS active involvement. Microsoft signing a piece of code in wild that can subvert their own secure boot ... is something else entirely.

The point is that any company can sign a rootkit (for the price of $99) to run on windows machines with our without SecureBoot. The best MS can do is to revoke certificates of rogue companies but by then the damage could be done.

In fact, as that Wikipedia article points out, it was exposed by a Microsoft employee:

The scandal erupted on October 31, 2005, when Microsoft researcher Mark Russinovich posted to his blog a detailed description and technical analysis of F4I's XCP software that he ascertained had been recently installed on his computer by a Sony BMG music CD. Russinovich compared the software to a rootkit due to its surreptitious installation and its efforts to hide its existence. He noted that the EULA does not mention the software, and he asserted emphatically that the software is illegitimate and that digital rights management had "gone too far".