Re: El Reg, I love you
"Which if you'll recall are the SAME IPs that are used to handle security updates and the like."
Indeed. But, as I said, my actual solution to this issue is to not use Microsoft products, mostly because they're full of their own security problems. Easy-peasy. And even if I did use them, I'd still block access to Microsoft servers regardless of DNS issues, in order to ensure that automatic updates don't happen (not to mention telemetry).