Have to say it's pretty weird to agree on service requirements with another party, and then go and run our services on Azure, which can't really give such specific guarantees.
Swedish collective transit means nothing to MS in terms of revenue, and we don't have any "special agreements."
And then MS can go and run 500000-line C programs as root on "our" servers, which grant remote root to anyone.
It's quite hard to account for stuff you didn't even install that's nonetheless there.