Windows defender really said “no malware if no boot” and shipped it anyway