Exactly, if you are as big a Microsoft, you can’t tell 100% if one of your developer’s is actually being paid by a foreign government. Even if you say completely check the commits other devs make, there will still be deadlines when a code review is just “looks fine, next”.
That is true, but my smart TV and smart scale both got something like 5 years of updates. Who buys a new scale every 5 years? My parents still have a scale from the 90s that works fine.