Microsoft Graph requires the organisation administrator to enable extra user permissions or to add an app to allow users to use this, whereas by reverse engineering users don't need organisation administrator permission.

Org-level admin requirements are what stopped me from pursuing my own solution. Hopefully your approach will have better luck.

That's a shame. What was your product, and did you have any troubles with reverse engineering or did you not consider it?