Good points raised and I largely agree, but just look at the article, several pages explaining passwords and security, along with screen shots (which I think mu

Good points raised and I largely agree, but just look at the article, several pages explaining passwords and security, along with screen shots (which I think must be equivalent to having maths equations in your document in terms of their power to make eyes glaze over), and a call to "reach out to your IT department". Do MP's even have an IT department? I thought they were responsible for their own offices, and on quite a tight budget. "Have these people never heard of delegation permission?" You know what, probably not. Nor have I, and I'm a dev, though I don't use exchange, and of course I do understand the concept. "But we do need to call out credential sharing in this fashion for what it is and it's precisely what I highlighted in that original tweet - lack of education." The actual problem here is that security is just too hard for users, the implementations are too complex or onerous, and even perhaps undesirable to them if the intent is just to "track them, make them accountable (in reality, blame them when things go wrong)", etc.