It should be noted that a lot of companies audit security software like this and attest that the implementation is secure and safe to use.
I'm curious if Microsoft did the same for their encryption scheme and if so, who they hired. Because anyone who did attest to the security of this component is likely compromised as well.