The company’s new approach is that anything touching Microsoft services is eligible for a bug bounty, regardless of its ...