Comment by Fischgericht

Yeah, it's true. c't magazine is the biggest IT print publication in the EU, and is highly respected and known for investigative journalism. It looks like the pictures provided which show what they captured is sent to Microsoft (your passwords in plain text) aren't shown if the page is viewed via Google Translate.

So here is the original page URL: https://www.heise.de/news/Microsoft-krallt-sich-Zugangsdaten...

And here is the picture that shows what they have captured is sent to Microsoft:

https://heise.cloudimg.io/v7/_www-heise-de_/imgs/18/4/3/3/1/...