[mmPzf]

One of my guesses is security. The story behind the discovery of MS08-067 reads like a strong argument in favour of some telemetry. The TLDR is that someone at Microsoft noticed a strange crash in some telemetry bucket, and it turned out to be a wormable zero-day. There's a write up at https://docs.microsoft.com/en-us/archive/blogs/johnla/the-in..., for those interested, and even though that story is twelve years old by now the general premise still stands.

[threentaway]

Yep. Every year the Windows security team catches 0days that are under development from the crash logs telemetry and is able to patch them before they're mass exploited.