I'm not sure how this is blowing them out of proportion. The 'Express' configuration that nearly every user will run with sends virtually everything you do to Microsoft. Please explain how that is not a serious privacy concern.