Asking the Culprit for Advice Instead of Holding the Culprit Accountable

Are they only paying Microsoft for those back-doored (in perpetuity) systems or also for "advice" after these inevitable breaches?

Are they only paying Microsoft for those back-doored (in perpetuity) systems or also for "advice" after these inevitable breaches?