Only data that is not stored cannot fall victim to attackers. It does not matter whether it is a ‘nigerian prince’, Microsoft or some agency. Even if you completly trust whatever entity with your data right now, they may become problematic in the future.
This is why a low profile is a crucial component of OPsec.
Recall is objectively stupid, even if Microsoft only had their users best interest in mind. And they don’t.