Tangent: Windows single sign-on is kind of broken. So if I hit a site that supports it, it will automatically try to log me in via my machine without asking cau

Tangent: Windows single sign-on is kind of broken. So if I hit a site that supports it, it will automatically try to log me in via my machine without asking causing my 2FA to fire and won't show me a login screen until that 2FA check succeeds/fails. If I want to sign in via any other Microsoft Account, I first need to 2FA my machine's Microsoft Account just to get the ability to login via a completely different account. Turning it on/off isn't a solution, because then you'll lose the ability to use Windows sign-on when you do want it. The login flow itself is just poorly designed. Although my bigger pet peeve by far right now is that every time I login to Microsoft Teams, it gives me a prompt ("Allow my organization to manage my device") that would essentially allow my employer to take over control of my personal machine (default: On, also a dark-pattern "Yes" box).