That's not what this is about. This is about the M365 tools that you can add to outlook/teams etc. It needs separate licensing and isn't enabled by default, you have to pay for it and assign to users/groups.
Regardless, my other points still stand. All of these tools remain a leak waiting to happen.
I mean, Azure has had several tenancy breaches where attackers could move from one tenant to another
> The risk isn't any greater than Azure getting hacked or something.
example: https://www.theverge.com/2021/8/27/22644161/microsoft-azure-...
they also had their master authentication keys leaked and didn't realise for 2 years
https://www.bleepingcomputer.com/news/microsoft/microsoft-st...
this one allowed the attackers to get into Microsoft executive's email accounts