[higherpurpose]

Don't forget Kaspersky (at least for Russian gov malware). I believe their CEO came out in favor of surveillance in a blog post for a brief period.

[Crito]

If Microsoft AV looks the other way for one set and Kaspersky looks the other way for another set, is it possible that there is a value of using a union of the two?

I assume Microsoft AV isn't going to look the other way for Russian exploits, unless the US is also using them, and vice versa.