If MS is concerned about personal expectations all they need do is read the MS Forums and MS groups on Usenet. No need to be invading people's computers for data.
People do banking online, what if there are a few thieves at MS? They're everywhere. Once they have people's passwords....