Microsoft's threat model seems to include the user as an attacker, so that's fair.