Microsoft has flat out stated they have paid no attention to security "because nobody was willing to pay for it". What they mean is "pay extra for something that is expected as part of the product".

Their customers are now so desperate they figure a Security Products division can be highly profitable.