His comments were fair, and even if you think there was some braggadocio involved in his comments. That would be entirely justified. Microsoft used to be the laughing stock of security many years ago. Since then they have put in a lot of time and work to seriously improve their security. That is a feature of their product, and it isn't really a just argument that a company shouldn't be proud of its technical accomplishments.
To be fair Microsoft isn't likely to be attacked. Whether some people want it to happen to them. The vast majority of hack attacks are amateurish, and are directed at soft targets. Microsoft isn't likely to be taken down by the first, and the second will only encourage the hackers to go elsewhere. They do not want to spend weeks or months coming up with a original strategy. When in the same time they can hit a couple dozen companies which have been lazy.







