Microsoft has made progress in the SFI, and has backed up its claims with numbers. But there is still work to do.
The Key Secure Future Initiative's November update includes compulsory MFA, device isolation, and secrets security.