I think it's important to note that this is explicitly about "the OS division". Microsoft may have a company wide policy about this, I have no idea. But I think there's a huge distinction between an OS having hidden code and some higher level application or script having hidden code. The effects are much different and much more dangerous at the OS level.
