Exactly, if you are as big a Microsoft, you can’t tell 100% if one of your developer’s is actually being paid by a foreign government. Even if you say completely check the commits other devs make, there will still be deadlines when a code review is just “looks fine, next”.
Keep running it for a while and after some time 5 or 10 years you will struggle when people ask you about (basic) Windows stuff.