you'd need to legally prove it's malware and they would definitely claim it's useful software tools that come with the hardware or something

I guess it’s becoming harder for MS to define malware in a way that would catch this behavior but does not flag their own products as well.