Azure compliance framework is 100% an Azure services upsell versus a genuine security focus initiative.

You’re telling me that a compliance test made by a vendor seems to only test how much you’ve spent with the vendor and not how secure you are?

I’m shocked.