Presumably this allows them to change the confidence statistics for logins, so that, e.g., SMS 2F is considered more likely to be an attacker. SMS 2F from a dif

Presumably this allows them to change the confidence statistics for logins, so that, e.g., SMS 2F is considered more likely to be an attacker. SMS 2F from a different location to a previous certificate/FIDO2 login might be denied or alerted. Also, they’re trying to force people into using the Microsoft Authenticator, which is an active telemetry collector, vs e.g. Google Authenticator, which is 100% offline and TOTP only.