Senator blasts Microsoft for making default Windows vulnerable to Kerberoasting (arstechnica.com)

He's not wrong. This plus default signing turned off on SMB has led to countless breaches. Microsoft has just never cared about security.