I mean, the Linux lmza exploit was found by a Microsoft engineer. Just because dollars exchange hands doesn’t mean the data provided is invalid.
Companies hire Jepsen to validate their code for example, and you’d be a damn fool not to accept their analysis.
They literally will do that. GDPR shows that they will go after big American companies (That’s the point, a huge chunk of this is protectionism to build a tech industry in the EU that they control)