Doesn't mean crap if they don't agree with bugs/vulns found. Also doesn't mean crap if they don't come up with proper fixes in a timely fashion.
https://www.bleepingcomputer.com/news/microsoft/microsoft-pledges-to-bolster-security-as-part-of-secure-future-initiative/