It's because it's not magic, someone has a microsoft account named no@thankyou.com that has enough sign in attempts to be disabled. I bet you could also do any

It's because it's not magic, someone has a microsoft account named no@thankyou.com that has enough sign in attempts to be disabled. I bet you could also do any other email address that people commonly use as a fake.