Replying to myself about the authentication tokens: on the PlaceholderMC discord channel, one of the former PolyMC developers mentioned that the Microsoft authe

Replying to myself about the authentication tokens: on the PlaceholderMC discord channel, one of the former PolyMC developers mentioned that the Microsoft authentication stuff was not under control of the compromised/rogue developer. My interpretation of that is that the authentication tokens are safe (unless an auto-update or the code delivered through the meta server is used to exfiltrate them).