Windows source has leaked (so many times) and someone ran claude code on it to find vulns, as expected; few million more patches coming; those exploits sell well $$$

Hence, there is a huge monetary incentive to leak window's source; especially if your RSUs are not really bringing money home.