Microsoft Defender tags Office updates as ransomware activity (bleepingcomputer.com)

This is why I prefer Linux.

This could be interpreted as a commentary on annual subscription models

They implemented the features. People just need to use them.