Well they somewhat got hacked... As the article states (The Korean site, unlike U.S. versions, was operated by another company) so Microsoft themselfs were not in control of the website.... and (Microsoft believes the computers were vulnerable because operators failed to apply necessary software patches) so you can't really blame Microsoft for the other companies lack of updates.
Sure my personal opinion should be that patches would not be needed... but they obviously are and as much as I like holding Microsoft for their mistakes/failures/holes/whatever... I'll admit, its fun sometimes to make fun of them... but in this case, you can't really hold them responsible. It may have been their website; but its not being run by them.