Guess what they did a year ago.
They removed 700 or so packages from NuGet proactively but those turned out to be false positives.
It is hard to do the right things.
FTFY
It is hard to do right things at their scale and when you do the right thing other division might actively work against you.
There was this „how companies work” image where MSFT was each division pointing guns at each other.
FTFY