Microsoft is correct. You can just use the most recent windows 10 zero day and get anything you want, no password or account needed... Or any of the other numerous MS products that currently have zero day vulns.