Microsoft deleted the researcher's bug report account, suspended their GitHub, and threatened criminal charges, all while three zero-days remain unpatched.