Not that it absolves MS, but this is the status quo, since broadband internet is widespread. Systems in general became very chatty over the net, and every proprietary system phones home for various functionalities, user conveniences and telemetry. And very few system is explicit upfront what gets communicated over the net and what not. Even private, open source software communicates a bunch by default, like Syncthing. This one specifically is peer to peer, and advertises privacy first thing on the homepage, but two instances, both behind NATs, still can't communicate without a third party that connects them at first - like STUN/TURN systems that they themselves host (stun.syncthing.net).
