We noticed this crap when we rolled out MS365. We immediately told all users to not use the MS authenticator.

The fact that Microsofts still hasn't fixed this should put in question their priorities in security and safety of all other products as well. This is just unacceptable.