Critics also decry Microsoft's "pay-to-play" monitoring that detected intrusions.