While this is very true, it's also relatively common for such breaches to actually be remedied by lawsuits (though obviously not from the poorest people who have no way to fund that). And in the UK for instance, I've successfully forced the hands of a few companies via the fair trading office, financial ombudsman and advertising authorities; All it took in those cases was a couple emails to the right place. Consumer laws do help.

I suspect Microsoft is big enough, and the population who haven't had their Minecraft account back is probably small and poor enough, though, to indeed be denied their rights.