If the rumours here on HN are true they need to start working on giving back some of their internal patches too. I think they also need to start providing funding to FLOSS projects too, and doing something like Google Project Zero.