Best user practices on a plate
What Microsoft has done here is far-sighted. It's taken over some responsibility for security on the user side of the fence and made it available as a service. All public cloud providers should be doing this, and some third parties are doing it for Amazon Web Services. But there's probably much more to be done. The cloud represents a split in security responsibilities between customer and provider, and Microsoft has offered some best practices on a plate to customers.