It’s much worse than just auth too. Microsoft’s security policy around email is so bad that using Office 365 email should be considered a security problem.

They’re actively enabling phishing because they choose to rollback standards support.

https://www.brightball.com/articles/how-microsoft-became-phi...

https://news.ycombinator.com/item?id=34911811