What matter is the software, when they sell software they are required to have a way to exfiltrate data. And even if they were a different company, they would still be "owned" by Microsoft US so this would mean data owned by Microsoft US so back again to FISA... They can't respect GDPR and we can kick them out, and it would be better than more customs.