You can implement security measures on top of what is provided by Microsoft. If you have encryption at rest and you hold the keys locally, for example, even thi

You can implement security measures on top of what is provided by Microsoft. If you have encryption at rest and you hold the keys locally, for example, even this high-level leak would not expose you. That said, good luck implementing and managing that in a large organization.