Out of all the service providers I've worked with, microsoft's been the worst. Few years ago I was amazed that I could literally brute force an o365 admin acco

Out of all the service providers I've worked with, microsoft's been the worst. Few years ago I was amazed that I could literally brute force an o365 admin account via powershell and it would never lock the account and of course there was no way to enable 2fa for the account...