My first thought was that Microsoft (or a subset of) probably determined any impact from an adversary taking advantage of these client side settings was fairly

My first thought was that Microsoft (or a subset of) probably determined any impact from an adversary taking advantage of these client side settings was fairly minimal (at least the messagePolicy values). Then I remembered zoombombing is a thing and can be pretty disruptive. It could also be an inherited problem from the days when teams was actually Skype for business.