The Kill Switch Has a Loyalty Program - Microsoft is in the Trump trap
Three weeks before Brad Smith promised Europe that Microsoft would protect it from Washington, Microsoft had already locked the Chief Prosecutor of the International Criminal Court out of his own account.
Karim Khan got sanctioned by executive order in February. A British bank froze him. Microsoft logged him off. The company's statement is a quiet triumph of the passive voice: they were in contact with the court throughout the process that led to the official "being removed" from Microsoft services. Things happened. A man got removed. No hand anywhere near the switch.
Then in late April, Smith went to Brussels and pledged "emergency provisions for business continuity." European partners. Fallback hosting. Lawsuits against any future shutdown order. A great deal of would.
The trade press called it the Trump trap. Wrong frame. Microsoft isn't trapped. Microsoft is a US company doing exactly what US companies do under US law: comply. The trap belongs to the customer. Microsoft just rents it out by the seat.
Smith's offer is a better promise. It is still a promise. And the whole European conversation right now is a procurement exercise in shopping for a nicer one.
Notice the tell in Microsoft's own wording. They're at pains to say they never cut off services "for the court as a whole." Read that twice. They kept the institution and amputated the man. That precision isn't reassurance, it's a receipt: they can reach exactly one account when told to, and hit it cleanly. The data centre's postcode was never the variable.
One cloud analyst guessed Microsoft even gave Khan a runway — time to export his mailbox and move to Proton before the lights went out. Sperre de luxe. The deluxe lockout. They held the door for him on the way out of the building they were throwing him from. Khan now runs his email through a Swiss provider, which tells you how this story ends. The fix for a US kill switch was not a better American vendor. It was leaving the jurisdiction.
None of this is new. In 2019 Adobe deactivated every account in Venezuela over a sanctions order, then switched them back on once the order was amended. Your subscription, your files, your account — a license, revocable on instruction from a government you don't vote for and an email you'll never see.
So here's the distinction the residency salesmen keep smudging. "Your data stays in an EU data centre" is a fact about geography. It says nothing about control. Sovereignty isn't where the bytes sleep. It's who can be ordered to act on them, and from which capital. By that measure a German ministry on a US hyperscaler is sovereign in precisely the way Karim Khan was sovereign: right up until the Tuesday he wasn't.
Exactly one thing changes this, and it isn't a contract clause. It's architecture. If the provider holds only ciphertext and never the keys, a sanctions order can compel it to hand over everything it has and shut off everything it controls — and that turns out to be a pile of noise and an empty doorway. You can't order a company to produce plaintext it can't read. You can't order it to revoke keys it never held. You don't litigate the kill switch in a US court and pray. You delete it from the wiring diagram.
That's the entire SkyeConnex thesis, and the ICC just field-tested it for free. Zero knowledge at the provider. Keys on your side of the border. Data erasure-coded across clouds, so no single vendor is the choke point and no single memo is the off switch. Compelled disclosure becomes compelled disclosure of static. The lockout becomes a lockout from data you can rebuild yourself by lunch.
Smith isn't lying to Europe. He's offering the most he can lawfully offer, which is to promise he'll try his best. That's the honest version of the trap. The dishonest version is the one selling across the continent right now, where "sovereign cloud" means the same machine with a European flag on the login screen.
A promise not to cut you off is not the same as being unable to cut you off. Europe keeps buying the first. It should be building the second.
The kill switch already has a customer list. The only open question is whether you're on it — and whether you'd find out before your prosecutor does.
Sanctions against International Court of Justice: Microsoft is in the Trump trap
Originally published by Ross Norrie, founder of SkyeConnex, on LinkedIn.
Published June 1, 2026 · More from the SkyeConnex blog
More from the blog
Europe Built a €180M Sovereign Cloud. It Runs on Google. — June 3 it's law
Your Grocery Bill Now Comes With a Browser History
There was a time when shopping was simple.
Read → Architecture · 2 min readSkyeConnex - SkyeBucket (S4)
Every sovereign cloud pitch eventually asks you to do the same thing: rip out your stack and adopt theirs.
Read → Commentary · 2 min read89% Say Sovereignty Matters. 10% Paid For It.
BARC's Data Sovereignty 2026 is out. The headline: 89% of organizations rate data sovereignty as important. 51% say…
Read →